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PROCEEDINGS 


* OR 


THE VIDEOGRAPHER: We are now on the 
record. This begins Media Unit Number | in 
the deposition of Jamie Wilson. 

This is in the matter of Ira Klerman 
as the personal representative of the estate 
of David Kleiman and W&K Info Defense 
Research LLC, versus Craig Wright. 

This is in the United States 
District Court, Southern District of Florida. 
Case Number 918 CV 80176 B/BR. 

Today is November 8, 2019, and the 
time is 8:36 a m. 

This deposition is being taken at 
the Washington, D.C. offices of Boies 
Schiller. 

The videographer today is David 
Campbell of Magna Legal Services and the 
court reporter is Lori Goodin of Magna Legal 
Services. 
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Counsel will you please identify 
yourselves for the record and then the 
witness will be sworn in and we can proceed. 
MR. FREEDMAN: Vel Freedman of Roche 
Freedman for the plaintiff. 
MR. BRENNER: Andrew Brenner from 
Boies Schiller for the plaintiff. 
MR. PASCHAL: Bryan Paschal for 
Dr. Craig Wright. 
MR. KASS: Zalman Kass for Dr. Craig 
Wright. And from our team we also have Julio 





Perez who is on video link. 
* OK OK 
JAMIE R. WILSON, 
a witness called for examination, having been 
first duly sworn, testified as follows: 
* OK 
EXAMINATION 
BY MR. FREEDMAN: 
Q. Good morming, Mr. Wilson. 
A. Good morning. 
Q. My name is Vel Freedman, we have met 
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and spoken a few times before. 
This is your deposition. You have 

just told us earlier that you have never taken a 
deposition before. Is that correct? 

A. That's correct. 

Q. Iwill go through a little bit of 
the ground rules here for you and then we can get 
started. But before that, lets just take care of 
a little housekeeping. 

Can you please state your full name 

and date of birth for the record? 

A. Jamie Robert Wilson, 15th of June, 
1980. 

Q. And your home address? 

A. 361 Westlake Drive, Queensland, 
Australia. 

Q. And your work address? 

A. 11420 George Street, Queensland, 
Brisbane. 

Q. Allin Australia? 

A. Allin Australia. 

Q. So you understand that you are under 
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oath today and you are sworn to tell the truth? 

A. Yes. 

Q. And your examination is now being 
recorded and may be shown to a jury at some 
point. 

Along those lines of the ground 
rules, the court reporter is taking down 
everything you say. And so it might be 
counterintuitive, but you need to try to audibly 
respond. So yes or no. If you shake your head 
yes or if you shake your head no, she won't get 
it. 

A. Okay. 

Q. Iwill try to remind you to speak 
audibly, but try to do your best also. 

A. Tunderstand. 

Q. Are you taking any medication today 
that might affect your ability to tell the truth? 

A. No, I'm not. 

Q. Or to recollect anything? 

A. No. 

Q. Is there anything that would impair 
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your ability to tell the truth at this deposition 
today? 

A. No. 

Q. Okay. If I ask you a question and 
you don't understand it, please ask me to explain 
or repeat it. 

A. Will do. 

Q. Ifyou don't, I will assume that you 
understood the question, and I will rely on your 
answer, okay? 

A. Okay. 

MR. PASCHAL: Just one second, but 
mine is working, but -- 
MR. FREEDMAN: Go off the record. 
THE VIDEOGRAPHER: Off the record at 
8:38. 
(Whereupon, a discussion off the 
record took place.) 
THE VIDEOGRAPHER: We are back on 
the record at 8:39. 
BY MR. FREEDMAN: 
Q. And finally, if you need a bathroom 
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break or you just need a break, stretch your 
legs, take a second. Let me know. This is not a 
marathon. 
A. Will do, okay. 
Q. Okay. So, Mr. Wilson, you were born 
in Australia? 
A. Yes. 
Did you go to college or university? 
Yes. 
Where did you go? 
Queensland University of Technology. 
Did you attain any degrees there? 
Bachelor of Commerce. 
And what year did you get the 
Bachelor of Commerce? 
A. 2006. 
Q. Did you ever become a CPA or go to 
graduate school? 
A. No. 
Okay. Have you been an accountant? 


Q. 
A. Yes, but not a tax accountant. 
Q. 


And did you take any training to 


become an accountant? 

A. Yes. 

Q. Where? 

A. At JW Schubert & Co, located in 
Springwood in Logan, in Queensland. 

Q. When did that program start? 

A. It would have -- 2004 to 2008. 

Q. Okay. Was that your undergraduate 
in commerce also? 

A. It was. 

Q. And then after, and you graduated in 
2008? 

A. Yes. 

Q. And then did you begin working as an 
accountant? 

A. Yes, I did. 

Q. In 2008? 

A. Istarted from 2004. 

Q. 2004 you were working as an 
accountant? 

A. That's right. 

Q. And how long did you continue 





(Pages 10 to 13) 


LEGAL SERVICES 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 5 of 214 


PoR 
FPOWUA NIA UB WNP 





working as an accountant? 

A. Up to 2010. 

Q. Okay. Did you ever work as an 
accountant after 2010? 

A. I, well only on the projects that I 
was looking after full-time. 

Q. Got it. So you weren't -- 

A. So, not outside, where my interests 
weren't involved. 

Q. Gotit. When did you first learn 
about Bitcoin? 

A. Bitcoin, 2011. 

Q. Okay. And how did you learn about 
Bitcoin? 

A. It was part of my travels around the 
world where I was cross-examining a whole lot of 
cybersecurity experts looking for a solution that 
I have built today in the market. 

Q. Okay. So, can you tell me when you 
first met -- well, do you know Craig Wright? 

A. Yes, Ido. 

Q. Can you tell me when you first met 
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Craig Wright? 

A. Craig Wright I would have met in 
2012. 

Q. And how did you come to meet him? 

A. Through working and cross examining 
a whole lot of cybersecurity experts to build a 
stronger solution. 

Q. And tell me about the solution that 
you have now built. 

Is that your digital file? 
A. That's correct. So, our technology 


is called Cryptoloc which is a cryptographic 


solution and we've got global patents which have 
an escrow in a point of difference on a global 
stage. 
Q. And you first spoke with Dr. Wright 
to help you build this technology? 
That's correct, yes. 
Along with a bunch of other -- 
So, I already had started in 2012. 
Okay. 
So, it would have been like '12, 
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early '13 that I actually physically met Craig. 

Q. Okay. 

A. And from there we did bring Craig in 
as a, the expert cybersecurity to be able to 
oversee the development of the product. 

Q. Got it. And did, similarly did 
Craig involve you in his companies at that point? 

A. No, no. It was after that period of 
time. 

Q. Approximately when did Craig involve 
you in his companies? 

A. It would be 2014. Around about June 
or July of 2014. 

Q. Okay. Do you recall what capacity 
he, Dr. Wright involved you in his companies? 
A. Because we were working on the 

Cryptoloc Solution for Your Digital File, he 
liked the way I was building the culture of the 
team. And, he said to me Jamie, I want to start 
a new project would you come on as a director. 

And also with my background you 
would become the CFO. 
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Q. Got it. So, he, Dr. Wright listed 
you as a director of various companies. 

A. That's correct. 

Q. Were you a director of Coin 
Exchange? 

A. Yes. 

Q. Were you a director of Integers? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Were you a director of -- do you 
remember all of the companies you were director 
of? 

A. No, I don't. 

Q. Were you a director of 
Interconnected Research Pty? 

A. Iwould have to have a look at the 
ASX Register. 

Q. Were you a director of Hotwire 
Preemptive Intelligence Pty? 

A. Yes. 

Q. Were you also a shareholder in some 
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of these companies? 
Craig did gift me shares. 
Okay. 
But when I resigned, it was removed. 
Okay. Were you, do you recall if 
you became a shareholder of Coin Exchange Pty? 
A. I'm positive I did, yes. 
Q. Okay. And were you also the CFO for 
Coin Exchange? 
A. Iwas. So, for all companies I 
would have been the CFO. 
Q. Okay. And bear with me here. 
Since, we had some printing trouble earlier so 
I'm trying to pull these up electronically. 

Let me e-mail these to you guys. 

I'm going to hand you what has been 
produced in this litigation as Defense Australia 
108905 through 108908. 

And we will mark it as Plaintiffs 
Exhibit 1. 

(Wilson Exhibit Number 1 
marked for identification.) 


BY MR. FREEDMAN: 

Q. Ifyou could start at the top and go 
forward. You guys should have it in your e-mail. 

A. The resignation letters. 

Q. Correct. So, if you take a look at 
the date at the top for me, Mr. Wilson. 

A. 23rd of October, 2013. 

Q. So, does that help you potentially 
remember when you started working and when you 
ended working for Dr. Wright? 

A. It would have been, so, Craig would 
have come in, I would have to have a look at my 
records. It would have been the end of 2011 and 
2012. 

Q. Okay. And then you would have 
resigned in October of 2013? 

A. Yes, I did, yes. After I returned 
from New York. 

Q. Okay. And if you take a look for me 
at the page that is marked at the bottom 108907, 
it is the third down. 

A. Yep. 
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Q. Do you see where it says-- 

A. 907, Interconnected Research Pty. 

Q. Does that help you remember if you 
were the director of Interconnected Research Pty? 

A. Yes, this one here was a company 
that I was set up when I was in New York which 
would have been September or October, which Craig 
signed me up as a director without my consent. 

Q. Okay. Did you -- thank you, 
Mr. Wilson. 

Did you ever help -- well, you know 
what, before I take these back from you, do you 
recall writing these resignation letters? 

A. Absolutely. And I physically handed 
it to Craig as well. 

Q. And these are the resignation 
letters that you handed to Craig? 

A. That's right. And e-mailed. 

Q. Okay. Did you ever help Craig set 
up a trust? 

A. No. One of our lawyers, who was 
also on the board of Your Digital File, called 
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Diane Pinder, was the one who looked after the 
trust. 

Q. Okay. And then as we have just seen 
you have resigned in October of 2013. 

A. Yes. 

Q. Can you tell me why you resigned? 

A. The reason for it is that I wasn't 
feeling comfortable with the position of what was 
happening and not understanding everything behind 
the documentation and the accounts. That was the 


purpose of it. 
And also at the same time my ex-wife 


had medical issues as well. 

Q. Okay. Can you explain to me a 
little bit more what you meant, what you mean by 
you weren't comfortable with what was going on in 
the documentation. 

A. Well, in, the lead up to my 
resignation, and it would have been over a 
12-month period, Craig did set up these 
companies. And I was working with Craig, prior 
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to us in regards to development. 

But, my trouble was, and it was 
exciting moving in with him to start working on 
the new projects. 

But, where I didn't feel comfortable 
is Craig's change of attitude from a developer 
that would be in hoodies and, you know, very low 
key and working with, to one that, that is it, 
I've got to be the man, I've got to be the CEO, 
new flash suits, ties, and it was just a massive 
change from where he was conservative to right 
out there. 

Also I didn't agree on the 
employment of the staff and the buildup of these 
companies without understanding, the full 
understanding, of where the funding was coming 
from. 

So, I know there was a lot of 
Bitcoin there. However, when I started to have a 
look at the R&D and the claiming of the R&D, 
research and development, for the Australia 
federal government I didn't feel comfortable when 
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I noticed that these amounts were from a U.S., 
and at that time and I am still not aware if the 
money actually was funded by the U.S. government. 
And I thought, well hang on, the 
Supreme Court of Australia has turned around and 
brought this IP into Australia, and now Craig is 
turning around and claiming the R&D on this 
money, that was paid by the U.S. government. 
And I thought, this to me looks 

fraud. And, I want nothing to do with it. 

Q. So, you resigned? 

A. Iresigned. And since then I have 
had many times with the Australia taxation 
office, coming and investigate where I had to 
give evidence and the breakdown of it, purely 
because of, they put me under a microscope, the 
ATO. 

Q. And has the ATO found that you did 
anything wrong? 

A. No, no. 

Q. Okay. Iam, and ATO is the 
Australia Tax Office? 
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A. Taxation Office. 

Q. Okay. 

(Wilson Exhibit Number 2 
marked for identification.) 

MR. FREEDMAN: I have just sent 
e-mails to you, counsel. 

BY MR. FREEDMAN: 

Q. But Mr. Wilson, I'm going to hand 
you what has been produced in this litigation as 
Defense 45496. And if you can take a look at it 
for a second, specifically under the line is, it 
appears to be an e-mail from you to Craig. Do 
you see that? 

A. Yep. 

Q. Do you remember sending this e-mail? 
You can take a second to familiarize yourself 
with the document. 

MR. PASCHAL: You going to be 
e-mailing us documents or do you have 
physicals. 

MR. FREEDMAN: We are waiting for 
them to print. But I will e-mail them to you 


Page 25 


in the meantime. 
MR. PASCHAL: If you are e-mailing, 
it takes a second to get to us, so let us 
look at it before you show it to him. 
THE WITNESS: That's correct. 
BY MR. FREEDMAN: 
Q. So, you recognize this document? 
A. Yes. And I did send it. 
Q. Okay. And, can you tell me a little 
bit about what happened in this e-mail? 
A. Okay. So, the reason for it was 
that Craig wanted to increase his holdings within 
YDF, with -- 
Q. This is your company? 
A. That's correct. It was called the 
Digital Filing Company Pty Ltd which no longer 
holds, in operation. 

The reason, I wasn't aware that the 
transfer in these amounts had been done and, nor 
the capitalization of these accounts with the 
listed on ASIC, hence why I did do the e-mail 
just so that it was down on paper. 
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Q. Let me break this down for you. The 
capitalization of the accounts. Can you explain 
that a little bit to the jury? 

A. This is what the issue was. I 
didn't see the physical cash in the bank; it was 
done by Bitcoin. 

Q. There was a capitalization of, I'm 
looking at your e-mail, looking at a 
capitalization of eight and a half million 
dollars? 

Correct. 
$40 million? 
That's right. 
$30 million. 
. That's right. 
. Suffice to say 10s and 10s of 
millions of Bitcoin? 


A. Oh, absolutely. And "Craig I see 
you have issued shares to me personally and I'm 


not aware this was done already. This needs to 
be fully accounted for as we are dealing with a 
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publically listed company." And that was Rubik |22 


over in Australia. 

They also were investigated by the 
Australia Taxation Office in regards to the 
matter with Craig. 

Q. Got it. And did you ever sit down 
with Craig and discuss this e-mail with him? 

A. Ican't recall. 

Q. Okay. 

A. But the response is there from 
Craig, too, it doesn't allow this right now, but 
we have the following, oh, capitalization, that, 
why didn't Xero do it? Because it didn't have 
Bitcoin at that stage of the currency. 

Q. Got it. What happened to all of 
your shares in these businesses after you 
resigned, Jamie? 

A. Oh, they were just removed. 

Q. Okay. During the time that you 
worked for, or with Dr. Wright, so that would be 
from about 2011 to 2000 -- October of 2013. 

A. ‘13. 

Q. Did you ever -- 
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MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Did you ever talk or e-mail with 
Dave Kleiman? 

A. No. Not me personally, no. 

Q. Had you heard of Dave Kleiman? 

A. Yes, I had. 

Q. Okay. How did you hear of Dave 
Kleiman? 

A. Through Craig, saying it was his 
best mate and that they had been working on 
projects together. 

Q. Okay. Did he describe him as his 
partner? 

A. He, no, a good mate. 

Q. Idon't mean a romantic partner, I 
mean like a business partner? 

A. No,no,no. A business partner. 

Q. Did he describe him as a business 
partner? 

A. Yes. 

Q. And somebody he was working with on 


projects with? 

A. That's right. 

Q. Did you understand that to be 
intellectual property projects? 

A. No. 

Q. What type of projects did you 
understand it to be? 

A. Tonly understood later on, when I 
was going through the paperwork to do the R&D, 
that all of the material of the break up of the 
money that Dave Kleiman was actually on all of 
these applications, all of the grants for the 
federal, the U.S. government. 

So, that is how I started to become 
aware of it. 

Craig is not forthcoming with 
information. It is a very slow feed. But, the 
longer I was there, the more I started to realize 
that this is not correct way of doing business. 

Q. Isee. So you don't have much 
details about what they worked on. 

You just know that they worked on it 
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together. Is that fair? 

A. That's correct. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Okay. Do you have a lot of details 
about what they worked on together? 

A. No. 

Q. There may be times when opposing 
counsel lodges an objection to the way I'm asking 
you a question. 

So you may hear me ask a question 
more than once. 
If you could just answer it again. 

A. Okay. 

Q. Did Craig ever talk to you about 
Dave Kleiman's intent about anything? 

A. No. 

Q. Okay. Bear with me one second. 

So, Mr. Wilson, I think you told me 
before that you were Director of Coin Exchange; 
is that correct? 

A. Correct. 


MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. You also were a shareholder of Coin 
Exchange or were you, were you or were you not a 
shareholder of Coin Exchange? 

MR. PASCHAL: Objection, form. 
THE WITNESS: I was given shares. 
BY MR. FREEDMAN: 

Q. Sorry, go ahead. 

A. Iwas given shares by, gifted shares 
by Craig. 

Q. Did you serve as its CFO? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Were you, did you handle the 
accounts for Coin Exchange? 

A. No. And what is strange is I didn't 
actually handle the accounts for any of it. 
There was a bookkeeper that was involved. 

So, although I had the title of the 
CFO, Chief Financial Officer, my capacity as an 
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accountant, I was not given full control, nor did 
I even have access to zero. 

Q. Okay. So, during the time you were 
director and shareholder and the CFO of Coin 
Exchange, did Craig ever tell you that Dave 
Kleiman was also a shareholder of Coin Exchange? 

A. No. 

(Wilson Exhibit Number 3 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Mr. Wilson, I'm handing you what we 
are going to mark as Plaintiffs Exhibit 3? And 
it is a Document 83-5. It is an exhibit to the 
plaintiff's complaint. 

Can you take a look at this document 
and let me know if you have ever seen it before? 

A. No, haven't. 

Q. Okay. Do you see -- if you go to 
Page | of 9 for me. Or 3 of 11 at the top. 

A. 3of 11. 

Q. Do you see that? 

A. Yes. 
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Q. Itsays The agreement is between 
Dave Kleiman of W&K Info Defense Florida. Are 
you familiar with this Florida company W&K Info 
Defense LLC? 

A. Ibecame aware of it when I was done 
the R&D and realized that the W&K Info Defense 
LLC was a part of it. That is why I started 
questioning a lot. 

Q. Were you ever a director of W&K Info 
Defense LLC? 

A. No. 

Q. Were you ever a shareholder of W&K 
Info Defense LLC? 

No. 
Were you ever an officer of W&K LLC? 
No. I wasn't even aware of it. 
Did you ever have anything to do 
with -- strike that. 
If you turn to Page 5 of 11 at the 
top. You will see Paragraph 4B. 
A. Yes. 
Q. And it says, "Except the vendor's" 
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and the vendor is on Page 3, the vendor is Dave 
Kleiman of W&K Defense Info Research, "So accept 
Dave Kleiman's 323,000 remaining mined Bitcoin as 
a 49.5 percent stake in a new venture to be 
formed in Australia to be called Coin Exchange 
Pty Ltd." 

Do you see that? 

A. Ido. But if you have a look at the 
ASX registers it will turn around and advise you 
of the history of the directors of the company. 

Q. So you were never aware of this 
agreement or -- 

A. No, this is the first time I have 
seen it. 

MR. PASCHAL: Objection to form. 
BY MR. FREEDMAN: 

Q. Were you ever aware of this 
agreement? 

A. No. 

MR. PASCHAL: Objection to form. 
BY MR. FREEDMAN: 
Q. Were you ever aware that Dave had 
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reportedly bought an interest in Coin Exchange? 
MR. PASCHAL: Objection to form. 
THE WITNESS: No. This is 
April 2013. 
BY MR. FREEDMAN: 

Q. So, you were the CFO, in April of 
2013 -- strike that. 

What positions did you hold in Coin 
Exchange in April of 2013? 

A. I'm not too sure when I, when it was 
kicked off and when I was added as a director. I 
would have to go through the ASX Register. 

Q. Okay. Thank you. 

A. That previous -- oh, not to worry. 

Q. Okay. Mr. Wilson, were you aware 
that Dave Kleiman died in April of 2013? 

A. Yes. 

Q. How did you know that Dave died? 

A. Craig said to me a good mate of his 


Just passed away, and I believe he came over to 
Florida. 
Q. Okay. 
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A. Or he did fly to the States. 

Q. Did you notice a change in Craig 
from before and after Dave died? 

MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. 

BY MR. FREEDMAN: 

Q. Okay. Can you expand on what that 
change was? 

A. The change was from Craig, as I 
stated before, being a developer, security, 
hoodie, you know, very much -- 

MR. FREEDMAN: Sorry. 

THE WITNESS: You know, wearing 
hoodies and things like that, when I would 
have meetings down in Sydney, he would turn 
up and we'd go to a little cafe shop and 
things like that where the train station was. 

Once Dave had passed away and things 
started to get kicked off with these new 
companies, there was a matter of all of a 
sudden he had to dress in flash suits, you 
know, wear the best watches, shoes, 
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fascination with socks. 

Even down to vehicles. He moved 
from his normal Subaru which was beaten up 
and went and got a brand new car. It was 
just a massive change in lifestyle. It 
wasn't the Craig I originally met. 

BY MR. FREEDMAN: 
Q. So, I want to drill down on that a 
little bit more. 

Before Dave died you said Craig 

dressed in hoodies? 

A. Yes. 

Q. Can you expand a little bit more? 

A. Yes, tee shirts, normal sort of 
developer sort of clothes. You could tell -- I 
mean Craig is a very bright, very smart man. 

Q. Right. 

A. As Ihave said before, one of the 
greater futurists I have actually come across. 

But it was just disappointing to see 

the way the business was handled moving forward. 





And his arrogance, believing that he has got to 
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change himself, I think just caused him a lot of 
problems. 

Q. Beyond the physical change of going 
from hoodies to suits and expensive watches, did 
you see a change in his attitude at all? 

MR. PASCHAL: Objection, form. 
THE WITNESS: Yes. 
BY MR. FREEDMAN: 

Q. Did he suddenly have confidence? 
What was the change? 

A. Oh, the confidence went through the 
roof. It was a matter of I'm the man, I'm going 
to do this, this is the way I'm going to go about 
it. 

Whereas a lot more humble prior to 
Dave's passing. 

Q. And, how quickly after Dave's 
passing did this happen? 

A. I would have said June/July. 

Q. Did you understand, did you ever 
come to have an understanding of why there was 
this sudden shift in his personality? 


Did it have to do with money or any, 
I mean, tell me, did you see any -- strike that. 
Did you ever come to have an 


understanding of why there was a sudden, a 


massive shift in Craig's outward appearance? 
MR. PASCHAL: Objection, form. 
THE WITNESS: No. 

BY MR. FREEDMAN: 

Q. Okay. 

A. It was only when time has gone by. 

Q. Beyond flashy watches, suits, new 
cars, did you see any other sudden displays of 
wealth? 

MR. PASCHAL: Objection, form. 
THE WITNESS: Yes. 
BY MR. FREEDMAN: 

Q. Can you expand on that? 

A. Idid have a Christmas party and 
Craig and Ramona joined us at the event that 
night. 

I mean, Craig was very much, you 
know, the best of the Champagne, top shelf, and 
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out of a team of around about ten, there was 
about $15,000 spent on the evening, all paid by 
Craig. 

Q. Was that something Craig would have 
done prior? Is that something you had seen Craig 
do prior to Dave's death? 

A. No, absolutely not. I mean, prior 
to Dave's passing, I was the one buying the 
coffees and spending the money travelling back 
and forward. 

Q. And then thereafter? 

A. It was a matter of he would even fly 
his team up to Brisbane. We would all go out 
together. Craig would actually pay for everyone 
who came along. 

Q. Did it appear to you that after Dave 
died, Craig had access to massive amounts of 
assets that he did not previously have before? 

MR. PASCHAL: Objection to form. 
THE WITNESS: The money came from 
somewhere. 
BY MR. FREEDMAN: 
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Q. Sorry, go ahead? 

A. I believe that there was a change, 
and overnight he had a lot of wealth. 

Q. Okay. 

A. But, at the same time I know that he 
was in the very early stages of Bitcoin as well. 

MR. FREEDMAN: Can we take a, let's 
go off the record for a minute. 

THE VIDEOGRAPHER: Off the record at 
9:07. 

(Recess taken -- 9:07 a.m.) 

(After recess -- 9:12 a.m.) 

THE VIDEOGRAPHER: We are back on 
the record at 9:12. 

BY MR. FREEDMAN: 

Q. Mr. Wilson, I'm handing you what has 
been marked as Wilson 4, and it is, it was 
produced in this litigation as Defense 28015. 

(Wilson Exhibit Number 4 
marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, do you recognize this 
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e-mail as an e-mail from Craig to you? 

A. Yes. 

Q. Do you recall this e-mail? 

A. Yes, I do. 

Q. And in it it says, "This is where 
this started. All of this started to move much 
faster now. Dave passed a couple of months ago 
so I'm no longer waiting for him to get better." 

A. Correct. 

Q. Did you ever talk to Craig about 
what he meant by this e-mail? 

A. No. 

Q. Do you know why he sent it to you? 

MR. PASCHAL: Objection, form. 
THE WITNESS: I think it was all 
mainly to deal with the attachments and all 
of the files. 

BY MR. FREEDMAN: 

Q. Okay. 

A. And it was more about let's get 
going. 

(Wilson Exhibit Number 5 


Page 43 


marked for identification.) 
BY MR. FREEDMAN: 

Q. Okay. Mr. Wilson, I'm handing you 
an exhibit marked as Wilson 5. It was marked in 
this litigation, it has been produced in this 
litigation as Defense 266797. 

If you can take a look at this 
e-mail. Do you recognize it as an e-mail from 
Craig with a cc: to you? 
A. Yes. 
Q. And in it, Craig says, "Hello Love." 


I'm assuming that is addressed to Ramona. 

A. Correct. 

Q. "Well I said I would be doing 
something with that money. And there is a link, 


Jamie is on board." 
Do you know what money he is 
referring to? 
MR. PASCHAL: Objection, form. 
THE WITNESS: Well, yes. 
BY MR. FREEDMAN: 
Q. Which money? 
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A. It would be the money that he had 
from Bitcoin. 

Q. Okay. 

MR. PASCHAL: What was that marked 
as? 

THE REPORTER: Five. 

MR. ROCHE: This is Kyle Roche, is 
there any way we can move the mic closer to 
Mr. Wilson? 

MR. FREEDMAN: Kyle, we are not sure 
how to work the system here, so ... 

MR. ROCHE: Okay. 

(Wilson Exhibit Number 6 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Mr. Wilson, I am handing you what 
has been marked as Wilson 6. It has been 
produced in this litigation as Defense 25094. 

Can you take a moment to review this 

e-mail, Mr. Wilson, and let me know if you 
recognize it as an e-mail from Craig Wright to 
you? 
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A. Yes, I do. 

Q. Okay. This e-mail is also addressed 
to Michael Hardy at the Australia Tax Office; is 
that correct? 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Mr. Wilson? 

A. I'm not sure if Michael was the one 
from the ATO. 

Q. Okay. Do you remember getting this 
e-mail from Craig? 

A. Yes, I do. 

Q. In this e-mail, Mr. Wilson, Craig 
says that "The main addresses we control as a 
group include the following ones listed below." 
Do you see that? 

A. Itis in the middle. 

Q. Yes, right at the top the first 
sentence, the main address that we control as a 
group? 

MR. PASCHAL: Where are you reading 
from? 
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BY MR. FREEDMAN: 
Q. It says, "Hello Michael, as we noted 
there are a couple of recent transactions." 
At the end of that sentence, it 
says, "The main addresses we control as a group 
include the following ones listed below." 
Do you see that? 
A. Yes. 
Q. And then do you see, if you go to 


the paragraph that starts, "The addresses are in 


my control." 

A. Yes. 

Q. Itsays, "The addresses are in my 
control now." 

Did, and then, sorry, "The addresses 
are in my control now as a matter of fate and 
other circumstances." 

Do you see that? 

A. Yes. 

Q. "David Reese and David Kleiman have 
both been a central part of this project." 

A. Yes. 
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Q. And then, right above the little 
graphic he says, "The addresses are," and there 
is a list of addresses. Do you see that? 

A. Yes, correct. 

Q. Do you see where it says balance 
XBT? 

A. Yes. 

Q. That is the Bitcoin balance? 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Do you recognize that as a Bitcoin 
balance? 

A. Yes. 

Q. And it says Australia dollars and 
there is figures underneath that? 

A. Correct. 

Q. And then there is some additional 
wallets, addresses listed below that under the 
title Coin and Other? 

A. That's right. 

Q. Did Craig lead you to believe that 
he had the ability to access this Bitcoin? 
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MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. 100 percent. 
BY MR. FREEDMAN: 

Q. Did Craig ever tell you that these 
Bitcoin were locked in a file that he could not 
access? 

A. No, he could access them. 

Q. Okay. This was in -- so, let's go 
back here where it says, "These addresses are in 
my control through fate and other circumstances. 

"David Reese and David Kleiman have 
both been central parts of this project. 

"Both of these gentlemen, who I had 
the good fortune to call friends, passed away 
this year. David Reese was a friend of my 
grandfather before he died of Parkinson's. Dave 
Kleiman was my best friend." 

Do you know what he means by fate 
and other circumstances? 

MR. PASCHAL: Objection, form. 

THE WITNESS: No. 

BY MR. FREEDMAN: 
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Q. Let me rephrase that. Did you ever 
come to understand what he meant by fate and 
other circumstances? 

A. No. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Did he ever tell you what fate and 
other circumstances meant? 

A. No. And I didn't ask the question 
either. 

Q. Did he ever give you any more -- did 
Craig -- strike that. 

Did Craig ever give you any more 
color or explanation on what he meant by Dave was 
a "an essential part of this project"? 

MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. In that they 

worked together. 

Now, I believed that Dave was the 

original start. He started looking on the 
Blockchain. And then later on Craig joined 





it; it was a joint thing together, though. 
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BY MR. FREEDMAN: 

Q. And did you form that belief through 
statements Craig made to you? 

A. Yes. 

Q. Okay. When he refers to "this 
project," did you take that to mean the mining of 
all of this Bitcoin? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. How did you take the project to mean 
when he said Dave was an essential part of this, 
of the, of this project? How did you take "this 
project" to mean? 

MR. PASCHAL: Objection, form. 
THE WITNESS: It was the mining. 
BY MR. FREEDMAN: 

Q. The mining of? 

A.  Bitcoin. 

Q. Okay. Thank you. 

Do you see if you turn the page over 


to Defense 25095, do you see there is a graphic 


down there? 

A. Yes. 

Q. And if you look 1, 2, 3, 4,5, about 
six up from the top, from the bottom, do you see 
where it says CSW-Dave K-DV? 

A. That's correct. 

Q. Do you know what this wallet was? 

A. No. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Do you know why there is a redaction 
of the address? 

A. No. 

Q. Do you see at the top of the graphic 
it says Bitcoin Wallet? 

A. Yes. 

Q. Did you take, when you received this 
e-mail, did you understand it to be a snapshot of 
wallets that Craig, Bitcoin wallets that -- 

MR. FREEDMAN: It is tough. I know 


the court reporter -- 
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THE WITNESS: Right. 
MR. FREEDMAN: -- try to let me 
finish. 
MR. PASCHAL: And I object, form, to 
all of that. 
BY MR. FREEDMAN: 

Q. So, when you received this e-mail, 
were you under the impression that this was a 
snapshot of Bitcoin wallets that Craig had access 
to? 

MR. PASCHAL: Objection, form. 
THE WITNESS: Yes. 
BY MR. FREEDMAN: 

Q. Thank you. 

(Wilson Exhibit Number 7 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Okay. Mr. Wilson, I'm handing you 
what has been marked as Wilson 7. It has been 
produced in this litigation as Defense Australia 
553926. 

Mr. Wilson, do you recognize this 
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e-mail as an e-mail Craig sent to you, with a cc: 
to you, rather? 

A. Yes. 

Q. And it was sent on October 2nd, 
2013? 

A. Yes. 

Q. And it is also sent to Jenna Spears 
at the Australia Tax Office and Michael Hardy at 
the Australia Tax Office? 

A. Yes. 

Q. Do you recall receiving this e-mail? 

A. Yes. 

Q. In this e-mail do you see where 
Craig says in the second paragraph, "The group I 
head has a holding of over 100 million Australian 
dollars in XBT Bitcoin"? 

A. Yes. 

Q. Did you ever talk to Craig about 
this e-mail? 

A. No. This was in regards to -- so, 
Michael Hardy, now it does -- I do remember. 
This was in regards to the tax returns and also 
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the R&D, research and development. 

Q. Did Craig lead you to believe 
through this e-mail that he had the control over 
$100 million in Bitcoin? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Did he ever tell you that this 
$100 million in Bitcoin was locked in a file that 
he could not access? 

MR. PASCHAL: Objection, form. 
THE WITNESS: No. 
BY MR. FREEDMAN: 

Q. Did he ever tell you it was locked 
in a -- strike that. 

(Wilson Exhibit Number 8 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Mr. Wilson, I am handing you what 
has been marked as Wilson 8. It has been 
produced in this litigation as Defense 45457. 

A. Thank you. 


Page 55 


Q. Take a look at this e-mail for me, 
Mr. Wilson, and tell me do you recognize this as 
an e-mail that Craig sent with a cc: to you? 
A. Yes. 
Q. This e-mail was also sent to Michael 
Hardy of the ATO; is that correct? 
Correct. 
And Mark Italia of the ATO? 
Yes. 
. Do you see where he says, "I have 
also attached a stat dec." Is that a statutory 
declaration? "From our solicitors validating the 
control of a number of Bitcoin-based addresses." 
A. Yes. 
Q. "You can validate the amount held in 
these publicly. For instance," and there is a 
link with the block Explorer with the Bitcoin 
address that begins 1933? 
A. Yes. 
Q. Do you see that? 
A. Yes. 
Q. And then the next paragraph. "With 
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a holding in excess of 111,114 Bitcoin. The 
above address we have confirmed control of is 
valued at market, on market at Australian 
$16.4 million." 

A. Yes. 

Q. Did you take this e-mail, did you 
understand from this e-mail that Craig had 
control over a Bitcoin address with over 111,000 
Bitcoin in it? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Did you ask Craig what he meant by 
we have confirmed control over it? 

A. No. I was aware that he did have 
control of it. 

Q. Okay. Did he ever tell you that 
this Bitcoin was locked in a file that he could 
not access? 

MR. PASCHAL: Objection, form. 
THE WITNESS: When we talk about is 
it locked, all of them are locked and Craig, 
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my understanding, did have access to them. 
BY MR. FREEDMAN: 

Q. So, let me rephrase that. 

Did he ever tell you that it was 
locked in a file that Craig could not access 
himself? 

A. No. 

(Wilson Exhibit Number 9 
marked for identification. ) 
BY MR. FREEDMAN: 

Q. Okay. Mr. Wilson, I am handing you 
what has been marked as Wilson 9, it was produced 
in this litigation as Defense Force 46093. 

Mr. Wilson, do you recognize this 
e-mail as an e-mail that Craig sent with a cc: to 
you? 

A. Yes. 

Q. It was also sent to Mark Italia of 
the ATO? 

A. Yes. 

Q. And Michael Hardy of the ATO? 

A. Yes. 
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Q. With acc: to Ramona Watts? 

A. Yes. 

Q. Do you see where it says about 
midway through that e-mail, "Our funding comes as 
we are the group that controls 5 percent of the 
global Bitcoin market"? 

A. Yes. 

Q. Do you remember receiving this 
e-mail? 

A. Yes. 

Q. Did you ever ask Craig about how he 
came to control 5 percent of the global Bitcoin 
market? 

A. My understanding is that he was the 
founder. 

Q. Okay. Did he ever tell you, did he 
lead you to believe that he had control over the 
5 percent of the Bitcoin? 

A. Yes. 

MR. PASCHAL: Objection, form. 
Mischaracterizes the document. 
BY MR. FREEDMAN: 
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Q. Did he ever tell you that this 
5 percent of Bitcoin that he had control of was 
locked in a file that he could not access? 

A. No. 

MR. PASCHAL: Objection, 
mischaracterizes the document and his 
testimony. 

MR. FREEDMAN: Mr. Paschal, I have 
an e-mail from Mr. Kass specifically asking 
me to limit my objections to form in depos. 

I would request that you do the 
same. 

MR. KASS: I would like to see that 
e-mail if you've got it. We've had 
discussions. 

MR. FREEDMAN: Please keep your 


objection to form. 
(Wilson Exhibit Number 10 
marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, I am handing you what 


has been marked as defense, sorry, as Wilson 
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Exhibit 10. It was produced in this litigation 
as Defense Australia 113043. 

If you take a look, do you see the 
e-mail at the top of the page, this is a -- do 
you recognize this as an e-mail that Craig sent 
to you? 

A. Yes. 

Q. Italso went to Roger Manu of Rubik? 

A. Correct. 

Q. Init Craig says, "XBT Bitcoin has a 
currency. There are 11 million Bitcoin. Look at 
the exchange rate in XE.com." And then, "We 
control what is, all up, a little over | million 
Bitcoin." 

Do you see that? 

A. Correct. 

Q. Do you recall receiving this e-mail? 

A. Yes. 

Q. Did you believe by receiving this 
e-mail that Craig controlled over 1 million 
Bitcoin? 

A. Yes. 
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MR. PASCHAL: Objection to form. 
BY MR. FREEDMAN: 

Q. Was this statement that he 
controlled, all up, a little over 1 million 
Bitcoin consistent with other statements that 
Craig had told you? 

MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. 

BY MR. FREEDMAN: 

Q. Did Craig ever tell you that this 
over | million Bitcoin was locked in a file that 
he could not access? 

MR. PASCHAL: Objection, form. 

THE WITNESS: No. 

MR. FREEDMAN: As a mechanics issue, 
if I ask the question, take a beat before you 
answer and give Mr. Paschal a chance to 
object. 

THE WITNESS: Okay. 

MR. PASCHAL: Otherwise we are 
talking over each other. 

THE WITNESS: Done. 





(Pages 58 to 61) 


LEGAL SERVICES 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 17 of 


OarAn O PWN FP 








Page 62 


BY MR. FREEDMAN: 

Q. Mr. Wilson, I'm handing you what has 
been marked as Wilson 11. 

(Wilson Exhibit Number 11 
marked for identification.) 

BY MR. FREEDMAN: 

Q. It was produced in this litigation 
as Defense 30127. 

Do you recognize this e-mail as an 

e-mail Craig sent to -- with a cc: to you? 

A. Yes. 

Q. Itis also sent to Mr. Dempster at 
the ATO? 

A. Yes. 

Q. And the subject is Evidence? 

A. Yes. 

Q. And in it there is a listing of 
companies, a Coin Exchange and CSW Personal? 

A. Yes. 

Q. With the Bitcoin holdings of 438,000 
and 57,000? 

A. Yes. 


Q. The value of those Bitcoin on 
Mt. Gox which totals to 53.8 million. 

A. Correct. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Okay. And then, "My wallet is 
listed below." 

Do you see that? 

A. Yes. 

Q. Did you take this e-mail to -- did 
you take this e-mail to tell you that -- sorry, 
strike that. 

Did you understand from this e-mail 
that Craig owned, controlled and owned and 
controlled over $53 million worth of Bitcoin? 

MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. 

BY MR. FREEDMAN: 

Q. In fact, close to 500,000 Bitcoin? 

A. Yes. 

Q. Do you remember receiving this 
e-mail? 
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A. Yes. 

Q. Did you ever talk to Craig about 
this e-mail? 

A. It was ongoing conversations. 

Q. Okay. All consistent with the story 
that, what? 

A. Allof these Bitcoin holdings. 

Q. Okay. Did he ever tell you that 
this Bitcoin was locked in an inaccessible file 
to him? 

A. No. 

Q. Thank you, Mr. Wilson. 

So I can stop asking the question a 
million times, Mr. Wilson, did Craig ever tell 
you that Bitcoin he owned or controlled was 
locked in a file that he could not access? 

MR. PASCHAL: Objection, form. 

THE WITNESS: No. 

(Wilson Exhibit Number 12 
marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, I'm handing you what has 
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been marked as Wilson 12. It was produced in 
this litigation as Defense 46098. 

Do you recognize this as an e-mail 
Craig sent with a cc: to you? 

A. Yes. 

Q. Do you remember receiving it? 

A. Yes. 

Q. Do you see about halfway down the 
sentence says, "We control 165 million in XBT 
Bitcoin"? 

A. Yes. 

Q. Did you understand this e-mail to 
tell you that Craig controlled over 165 -- sorry, 
strike that. 

Did you take this e-mail -- strike 
that. 

Did you understand this e-mail to 
say that Craig controlled $165 million worth of 
Bitcoin? 

MR. PASCHAL: Objection, form. 

THE WITNESS: Yes. 

(Wilson Exhibit Number 13 
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marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, I'm handing you what has 
been marked as Wilson 13. 

It was produced in this litigation 
as Defense 467687. 

Do you recognize, and if you look at 
the second e-mail on the page, do you recognize 
this as an e-mail from Craig addressed to you and 
other individuals at Hotwire? 

Yes. 

Do you remember receiving it? 
Yes. 

If you look at the last sentence of 


the first paragraph it says, "A $5 million 


Bitcoin fund was world news and TV globally. We 
make this look like a mom and pop operation from 
the Winkly Bros." 
Do you see that? 
A. Yes. 
Q. What did you understand that 
sentence to say? 
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MR. PASCHAL: Objection, form. 
THE WITNESS: That Craig's holding 
is a lot greater than the small amount that 
the Winkler Brothers was trying to set up the 
fund. 
BY MR. FREEDMAN: 

Q. Mr. Wilson, when you finally did 
have access to some of the books in the company, 
did you see specific and identifiable wallet 
addresses? 

A. Yes. Craig showed me, like on 
screen. 

Q. Okay. Outside of the e-mails we 
have just looked at, did Craig lead you to 
believe that he had a massive amount of Bitcoin? 

A. Yes. 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Did Craig lead you to believe that 
he was incredibly wealthy? 

MR. PASCHAL: Objection, form. 
THE WITNESS: Yes. And that I was 
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extremely wealthy myself from the holdings 
and the gifting of the Bitcoin to myself. 
(Wilson Exhibit Number 14 
marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, I'm handing you what has 
been marked as Wilson 14. It is Document 83-4. 

If you open that up Mr. Wilson and 
take a look, do you recognize this as an 
affidavit Craig Wright submitted to the Supreme 
Court of New South Wales? 

Yes. 

Can you turn to Paragraph 23? 

Yes. 

In it Craig writes, "On first of 
August 2013 a shareholder's meeting was called 
for W&K Info Defense LLC to be held on the 16th 
of August 2013. 

"The meeting was e-mailed to the 
company address as well as sent to the address of 
the shareholders and company. 

"The shareholding of W&K Info 
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Defense LLC was Craig S. Wright 50 percent; David 
A. Kleiman 50 percent. " 
And in Paragraph 24, "The meeting 
from Point 23, the meeting was held on the 16th 
of August 2013. 
"The following people were present. 
Jamie Wilson, Craig S. Wright." Do you see that? 

Yes. 

Did this meeting ever occur? 

Yes. 

What happened at that meeting? 

Craig said to me that with David's 
passing that we needed to do the paperwork for 
him to turn around and take full control and 
resolve the issue of David being on the, as a 
shareholder. 

To be honest, at that stage I had 
no, I didn't have the knowledge or understanding 
of what it all meant, because the motions were 
already happening with the Supreme Court of New 
South Wales. 
Q. So, if you look at the next page, 
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"The following points were moved at the meeting: 
"One, Jamie Wilson will act as a 
director for purposes of consenting to orders and 
the company to be wound down. The vote was Craig 
Wright yes; no other parties. It was agreed that 
filing the motion to accept the debt owned by 
company W&K Info Defense LLC would be closed." 
Do you recall this happening? 
A. This is my first knowledge that I 
was acting as a director of the U.S. company. 
Q. So, this is the first time -- so, 
let me break that down a little bit. 
You do recall the meeting happening; 
is that correct? 
A. It was part of our meeting that day 
and it was around Hotwire PE. 
Q. Okay. 
A. Notso much WK. 
Q. So, you remember the meeting 
happening. 
Is it accurate to say that you 
remember the meeting happening, but you don't 
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remember being made a director of W&K? 

A. Absolutely. 

Q. Okay. So then you would agree with 
the characterization in 24, Paragraph 24 that 
there was a meeting. Present, Jamie Wilson and 
Craig S. Wright were there? 

A. Yes. 

Q. But is it accurate to say you would 
disagree with what happened in Paragraph 26? 

A. Yes. This is my first that I am 
being made aware that I was a director of the LLC 
company. 

Q. LLCisa Limited Liability Company. 
The LLC meaning W&K Info Defense Research? 

A. Yes. 

Q. Mr. Wilson, can you talk to me about 
the type of intellectual property that Craig was 
developing in 2013? 

MR. PASCHAL: Objection, form. 

MR. FREEDMAN: What is the basis? 

MR. PASCHAL: Well, you can't do it 
both ways. I'm going to give you every 
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single basis or do you want it just form. 

MR. FREEDMAN: I can ask you the 
basis when I want. 

MR. PASCHAL: You said keep it to 
form. 

MR. FREEDMAN: Yes, keep it to form 
unless I ask you. How am I supposed to know 
what your objection is? Normally I 
understand what your objection is. IfI 
don't understand what it is, I will ask you. 

So what is the basis of your 
objection? 

MR. PASCHAL: So, you have limited 
time in this deposition. Get through what 
you need to. Because I have questions. 

MR. FREEDMAN: I have seven hours, 
I'm good. 

MR. PASCHAL: No you have three and 
a half. 
MR. FREEDMAN: Are you not going to 
state the basis of your objection? 

MR. PASCHAL: I said form. 
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MR. BRENNER: Mr. Paschal, you know 
better. Counsel is allowed to ask you -- 

MR. PASCHAL: I'm not doing this. 

MR. BRENNER: You are not going to 
answer the form, okay. Good, then it is 





waived. 
MR. PASCHAL: It is not waived. 
MR. BRENNER: Okay, go ahead. 
BY MR. FREEDMAN: 

Q. Can you talk to me about the type of 
intellectual property Craig was developing in 
2013? 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. Please go ahead. 

A. So, we set up Hotwire PE and it was 
all about setting up a banking platform, working 
with Rubik out of Sydney. 

The challenges were that it went to 
a decimal six spaces instead of what we have 


today being four. So unfortunately it couldn't 
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At the time of October, so we 
started that around about June/July of 2013. And 
by October I actually had finished and resigned. 
All projects were related to Bitcoin 
also setting up exchanges. 

Q. Okay. So, was Craig involved in 
Bitcoin related intellectual property development 
in 2013? 

A. Yes. 

(Wilson Exhibit Number 15 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Mr. Wilson, I'm handing you what has 

been marked as Wilson 15. 

It was produced in this litigation 
as Defense 43726. 

Take amoment. Do you recognize 
this as an e-mail you sent to Craig and Ramona 
Watts? 

A. Yes. 

Q. Can you explain to me what this 
e-mail is? 


A. These were all of the projects that 
Craig wanted to work on. 5/5, Hotwire and the 
increase in staff in a short period of time. 

Q. So, these were all intellectual 
property projects? 

A. Yes. 

Q. And they all related to Bitcoin? 

MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 

Q. What did they relate to? What did 
all of the projects relate to -- strike that. 

Was there a common theme between all 
of these projects? 

A. Yes. 

Q. What was the common theme between 
all of the intellectual property projects that 


Hotwire was working on? 
A. It was Bitcoin. 
(Wilson Exhibit Number 16 
marked for identification.) 
BY MR. FREEDMAN: 
Q. Mr. Wilson, I'm handing you what has 
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been marked as Wilson 16. 

It was produced in this litigation 
as Defense 31588. 

Do you recognize this as an e-mail 
Craig sent to you and Ramona Watts? 

A. Yes. 

Q. Can you take a moment to familiarize 
yourself with it. 

A. Yes. 

Q. Can you tell me what was happening 
in this e-mail? What is Craig telling you? 

A. It was a purchase, a license 
agreement between the two companies. 

Q. Which two companies? 

A. And -- there was an agreement 
between, well it would have been the W&K Defense, 
the U.S. company, and the sale for the license to 
the Australian company. And this here was a cost 
that they were picking up to be able to claim for 
the R&D. 

Q. And do you see the last sentence in 
the e-mail, "We just need to ensure that the 
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court judgment is completed by August 30th." 

A. And it was. 

Q. Do you know why it needed to be 
completed by August 30th? 

MR. PASCHAL: Objection, form. 
THE WITNESS: To be age to launch 
the R&D and have the tax returns completed. 
BY MR. FREEDMAN: 

Q. Ifthe court judgment wasn't 
completed by August 30th, what would have 
happened? 

MR. PASCHAL: Objection, form. 
THE WITNESS: It would have had to 
fall through to the following financial year. 
BY MR. FREEDMAN: 

Q. So, is it accurate to say Craig was 
under a lot of time pressure to make sure the 
judgment finished by August 30th? 

MR. PASCHAL: Objection, form. 
THE WITNESS: Yes. 
BY MR. FREEDMAN: 
Q. Okay. When Craig told you that he 
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worked with Dave Kleiman, did you understand that 
to mean that he worked -- in projects that were 
based in Florida? 

A. Yes. 

Q. Did you understand that he worked -- 
strike that. 

Why don't we take ten minutes. Can 
we go off the record? 

THE VIDEOGRAPHER: Off the record at 

9:49. 

(Recess taken -- 9:49 a.m.) 

(After recess -- 10:01 a m.) 

THE VIDEOGRAPHER: We are back on 

the record at 10:01. 
BY MR. FREEDMAN: 
Q. Mr. Wilson, earlier I asked you if 
the you were a shareholder of W&K and you said 
no. 

But, I recall that W&K is an LLC, a 
limited liability company. It doesn't have 
shareholders, it has members. 

So, I'm going to rephrase -- 
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MR. PASCHAL: Objection, form. 
MR. FREEDMAN: I'm going to rephrase 
my question. Would you like to object? 
MR. PASCHAL: Yes, objection, form. 
There was no question. 
BY MR. FREEDMAN: 

Q. Mr. Wilson, did you have any 
membership interest in W&K? 

A. No. 

Q. Mr. Wilson, earlier you told me that 
the common theme of the intellectual property 
that Dr. Wright was working on in Hotwire was 
Bitcoin. Do you recall that? 

A. Yes. 

Q. Dr. Wright had other companies that 


you were also the director and shareholder of. 


Was there a common theme to those 
company's intellectual property development as 
well? 

A. Yes. 
Q. What was that common theme? 
A. All related to Bitcoin. 
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Q. Okay. Mr. Wilson, did Craig ever 
tell you that his e-mails were hacked? 

A. No. 

Q. Did he ever tell you his company 
documents were hacked? 

A. No. 

(Wilson Exhibit Number 17 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Mr. Wilson, Iam handing you what 
has been marked as Wilson 17. It was produced in 
this litigation as Defense 267325. 

Do you recognize the top e-mail as 
an e-mail Craig sent with a cc: to you? 

A. Yes. 

Q. Init Craig says, "I own both 
companies." 

Do you see that? 

A. Yes. 

Q. And did you take that as a reference 
to PanOptiCrypt and Hotwire in the e-mail below 
that? 
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A. Yes. 

MR. FREEDMAN: Counsel, up until 
this point every document Mr. Wilson has been 
handed he was a recipient of. 

MR. PASCHAL: Actually, no. Your 
computer screen is still on that TV. 

MR. FREEDMAN: This document he is 
not technically a recipient of it. 

If you can get him to execute the 
confidentiality order, but I really don't 
think this is a confidential e-mail. 

So, if you are willing to waive the 
confidentiality designation on it we can 
avoid that process. 

MR. PASCHAL: We can discuss it 

after the depo. 

MR. FREEDMAN: Okay. So, can you -- 
MR. PASCHAL: Send me an e-mail with 
the document. 

MR. FREEDMAN: I've got to hand it 

to the witness now. 

MR. PASCHAL: That is fine. If we 
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keep it, we will mark this part confidential. 
MR. FREEDMAN: If you hand it to 
him. I'll give you the unmarked copy. 
MR. PASCHAL: Okay. 
(Wilson Exhibit Number 18 
marked for identification.) 
BY MR. FREEDMAN: 

Q. Ihave just handed you what has been 
marked as Wilson 18, it has been produced as 
Defense 262775. 

I'm not sure if you have ever seen 
this before Mr. Wilson, but if you could take a 
minute to familiarize yourself with it. 

Are you familiar with what this is, 
Mr. Wilson? 

A. Itisa MYOB program. M-Y-O-B. I 
is an accounting package. I am positive it was 
only Xero we were using as an accounting package. 





Q. So you don't ever recall using MYOB? 
A. No, not for Craig's work, no. Not 

at all. 
Q. Okay. It references a company 
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Information Defense. Do you see that? 
A. Yes. 
Q. Do you recall, do you recall what 
that company was? 
A. It was part of the group of 
companies that Craig had set up for R&D. 
Q. And did you, were you involved with 
that company at all? 
MR. PASCHAL: Objection, form. 
BY MR. FREEDMAN: 
Q. Were you involved with that company? 
A. Ican't remember it. 
Q. Okay. 
MR. FREEDMAN: We have no further 
questions. 
MR. PASCHAL: Let's take a break and 
we will have some questions. 
THE VIDEOGRAPHER: Off the record 
at 10:07. 
(Recess taken -- 10:07 a.m.) 
(After recess -- 10:14 a.m.) 


THE VIDEOGRAPHER: Weare back on |22 





the record at 10:14. 
EXAMINATION 
BY MR. PASCHAL: 

Q. Good morning, Mr. Wilson. Iam 
Bryan Paschal. I represent Dr. Craig Wright in 
the matter that you have just testified with 
Mr. Freedman. 

A. Good morning. 

Q. Do you recall when you came in this 
room today? 

A. Yes. 

Q. Did you speak with that lawyer? 

A. No. Well, when I came into this 
room and you were here and present as well, at 
the same time. 

Q. And that is Vel Freedman, right? 

A. That's correct. 

Q. And what did you say to 
Mr. Freedman? 

A. Good morning. Good morning to all. 

Q. Did you say anything else to 
Mr. Freedman? 
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A. No. That was it. You were present 
when I walked in. 

Q. Did you say, "Mr. Freedman, it is 
finally good to meet you in person"? 

A. Yes. 

Q. How many times have you spoken to 
Mr. Freedman? 

A. Three, four times. 

Q. When was the first time you spoke to 
Mr. Freedman? 
Oh, maybe July. 
July of this year? 
Or August of this year, maybe. 
How -- this year, right? 
That's correct. It might have been 


August. 
Q. Okay. And how did you speak with 
Mr. Freedman? 
A. By phone. By phone call. 
Q. You have never e-mailed 
Mr. Freedman? 
A. Originally I did an e-mail. And he 
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said Jamie, we have been looking for you, can you 
give me a call. 
You said you sent an e-mail? 
I physically sent an e-mail. 
To say? 
A. To say congratulations or something 
like that on the case of Craig Wright. 
Q. So, in July or August of this year, 
you sent an e-mail to Mr. Freedman congratulating 
him on this case? 
A. That's correct. 
Q. And when did Mr. Freedman respond to 
you? 
A. Within a 24-hour period. 
Q. Okay. Let me go back to your first 
e-mail. 
Was there anything else other than 
you congratulating him for this case, was there 
anything else that you said to Mr. Freedman in 
that e-mail? 
A. No. I mean I could give you a copy 
of the e-mail. 
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Q. Yes, I would like a copy of the 
e-mail. 

A. Sure. 

Q. And what did Mr. Freedman respond to 
you and say? 

A. Can we talk? It was a phone call 
after that. 

Q. Was that all that Mr. Freedman said 
to you in that e-mail? 

A. Yes there wasn't much in it at all. 

Q. So, I just want to be clear. You 
congratulate him and he says I want to talk to 
you. That is it? 

A. Yes, it was very simple with a 
reply. 

Q. Okay. Are those the only e-mails 
that you had with Mr. Freedman? 

A. Yes, I'm more than happy to supply 
the e-mails to you. 

Q. Do you have any text messages with 
Mr. Freedman? 

A. No, only that can you write or can 
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you give me a call. I want to book my flights. 
I want to make sure that I don't stand him up and 
to make sure that I'm here present. 

Q. Okay. Let me get into that. So you 
booked your flight to come here for what purpose? 

A. No. So, Ido have an office in New 
York, a physical office on Madison Avenue. 

Q. Yes. 

A. I travel back and forward out of the 
U.S. on a regular basis. 

This, while I am here in Washington, 
was for the CINet Conference, which is a whole 
lot of leading CISOs nationally in the U.S. that 
we all to get together. 

Q. So, if I were to say that you don't 
travel to the US that frequently, would that be a 
false statement? 

A. That's correct. And you can tell by 
my passport and the amount of time that I enter 
America. 

Q. When did Mr. Freedman arrange for 
you to meet or have this deposition? 
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A. When he found out that I was coming 
to the States. 
Q. When did he find out that you were 
coming to the States? 
A. About two weeks ago. Ora week ago. 
Q. Okay. And how did you, how did you 
communicate that? 
E-mail. 
By e-mail? 
Yep. 
Okay. So there is a third e-mail 
then? 
A. Yes, there would be a couple of 
e-mails back and forth. 
Q. There is a chain of e-mails. 
A. That's right. 
Q. Okay. Did Mr. Freedman ask you to 


come or did you tell him that you were coming? 


A. No, no. I was coming. I mean I 
have had my conference here for the last couple 
of days. Physically here. 

Q. And when -- I'm sorry, when did you 
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tell him that you were coming? 
A. About two weeks ago. 
Q. About two weeks ago. Okay. Did 
Mr. Freedman, when you reached out to him in July 
or August of this year, did he ever ask you to 
come here for any other reason? 
A. No, not at all. 
Q. Okay. Did you ever get any filings 
in this case? Did Mr. Freedman ever send you any 
filings in this case? 
A. No, not at all. 
Q. Did he ever send you any documents 
in this case? 
A. Absolutely zero. 
Q. Did he ever ask you for any 
documents? 
A. Yes. 
You sent him documents. 
Yes. 
How many documents did you send him? 
Oh, my resignation letters. 
Oh, there was an e-mail or a social 
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media from Craig Wright making out that I was a 
liar and deceitful and things like that, which 


was posted. 
And I thought well, you know what, 


if that is the case, then I will give the 
evidence that I actually did physically resign. 
And these were the sequence of events. 

I am more than happy to share what I 
did share. 

Q. Okay. And, are you represented by 
counsel? 

A. No. 

Q. Okay. And if I needed to get in 
contact with you, how would I get in contact with 
you? 

A. I'm more than happy to give you my 
details. 

Q. What is your e-mail address? 

A. Jamie.wilson@cryptoloc, 
C-R-Y-P-T-O-L-O-C.com. 

Q. And what is your phone number? 

A. Plus 61-416-176-816. 
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Q. Is that a cell phone or a land line? 

A. No, my mobile number. And I will 
give you my card as well. 

MR. PASCHAL: I guess we have to 
mark this, can you mark this? 
(Wilson Exhibit Number 19 
marked for identification.) 

BY MR. PASCHAL: 

Q. And just, my colleague reminded me, 
what is your addresses for the offices in U.S.? 

A. So the one in New York is 261 
Madison Avenue, Level 9. 

Q. Okay. And then you said, do you 
have another one? I can't remember? 

A. No, just the one. 

Q. Okay. So I just, I don't want to 
mischaracterize anything you have said. 

So, you reached out to Mr. Freedman 

to congratulate him, correct? 

A. Yes. 

Q. And then you also reached out to him 
two weeks ago to let him know you were coming 


here, right? 

A. Yes. 

Q. He did not reach out to you, 
correct? 

A. No. He did. 

Q. He being Mr. Freedman? 

A. Mr. Freedman asked me when was the 
next time I'm coming to the U.S. 

Q. I'm sorry, did you ever receive a 
subpoena to show up at this deposition today? 

A. No. 

Q. Did you ever ask for a subpoena to 
be at this deposition today? 

No. 

Are you here voluntarily? 

Yes. 

Okay. Now you also testified a 
moment ago with Mr. Freedman that -- you said 
things changed with Dr. Wright some time between, 
or after Dave's death, right? 

A. Correct. 
Q. Okay. And Dave died in April 
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of 2013, correct? 

A. Yes. 

Q. And you also testified that after 
Dave's death Craig showed some wealth, right? 

A. Yes. 

Q. In fact you were able to tell me the 
exact amount that Craig spent for champagne with 
his wife, correct? 

A. Yes, for a Christmas party. 

Q. Fora Christmas party. And that 
Christmas party was in 2013? 

A. Yes. 

Q. I'm going to break that down. 

So -- 

A. I don't even know if it was a 
Christmas party. But it was a get together, 
anyway, a celebration. 

Q. Was it around Christmastime? 

A. I would have to go back and have a 
look. But it -- 

Q. So you remember the amount he spent 
for champagne, but you don't know -- 
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A. No, it wasn't champagne; it was 
dinner. It was a 15,000; it was top end, not 
champagne, had a big top range wine as well. 

Q. Were you responsible for the check 
for dinner? 

MR. FREEDMAN: Let the witness 
finish his answer, Mr. Paschal, before you 
continue. 

THE WITNESS: No. 

BY MR. PASCHAL: 

Q. But you remember the exact amount 
for the bill? 

A. Yes. 

Q. Now I'm just going to address this 
in parts, so ... 

Sure. 

You knew of Dave, right? 

Yes. Of him. 

Dave Kleiman, I should clarify? 

Yes. 

And you have heard people talk about 
Dave Kleiman, right? 
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A. Yes. 

Q. Did you know that Dave Kleiman lived 
in the VA Hospital for the last two years of his 
life? 

A. No. 

Q. Did you know that Mr. Dave Kleiman 
could not afford to pay his cell phone bill 
during that time, so his phone was disconnected? 

A. No. 

Q. Did you ever that his friends had to 
lend him money to pay his cell phone bill so that 
he could use his cell phone? 

A. No. 

Q. Did you know that Mr. Kleiman could 
not afford his internet or cable and XFINITY 
actually had to disconnect his account? 

A. No. 

Q. Did you know that the day that 
Mr. Kleiman passed, or about the day that he 
passed or the day before he passed, his credit 
report showed that he had applied for a Payday 
loan and was denied? 
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A. No. 

Q. Did you ever know Dave Kleiman to 
have a considerable amount of wealth? 

A. No. 

Q. Did you ever see Dave Kleiman 
develop any intellectual property? 

A. Inever met Dave Kleiman. 

Q. But just answer my question: You 


never knew of him developing any intellectual 
property? 

A. Only with Craig being Blockchain or 
Bitcoin. 


Q. I'm going to get into that in a 
second. 
that? 


So that is the only way that you know 


Absolutely yes. 
And did Craig tell you that? 
Yes. 
. Andon how many occasions did Craig 
tell you that? 
A. Well that is how he started 
Blockchain or Bitcoin. And it was a matter of I 
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did it with Dave Kleiman. 

So, that is how I knew of Dave 
Kleiman was purely because of the relationship 
between the two. 

Q. Just to clarify, you said I did it 
with Dave Kleiman? You did it with -- 

A. No. No. Craig. 

Q. So Craig told you that. 

A. Yes. 

Q. And that is how you formed your 
belief that Dave created intellectual property? 

A. Together with Craig. 

Q. Together with Craig? 

A. That's right. But I had no 
understanding that -- 

Q. So, based on that statement -- -- 
I'm sorry, go ahead. 

A. That he was in financial ruin. 

Q. Who was in financial ruin? 

A. David Kleiman. 

Q. Okay. Now, you said that there was 
a change in Craig. He started wearing suits, 


right? 

A. Yes. 

Q. You just have to answer for the 
record. 

Yes. 

You mentioned fancy watches. 

Yes. 

You said that he was showing that he 
had money. 

Yes. 

That he had bought a new car? 

Yes. 

And to you that made you 
uncomfortable? 

A. No. What made me uncomfortable was 
the change in habits and also the way that he was 
going about his business. 

So, that was only a small effect 
versus how he would actually run the business and 
on-board staff and new projects. 

Q. Okay. 

A. So there is a bigger picture here. 
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They are the smaller elements of the bigger 
picture. 

Q. But this started in Dave's, after 
Dave died? 

A. Yes. 

Q. So, he didn't exhibit this before 
Dave died? 

A. No. 

Q. Okay. And Dave died in April of 
2013? 

A. Yes. 

Q. I'm going to show you -- 

MR. KASS: It will be Exhibit 20. 
(Wilson Exhibit Number 20 
marked for identification.) 

BY MR. PASCHAL: 

Q. So, I'm showing you an employee 
remuneration. 

A. Yes. 

Q. But you are familiar with this 
document, correct? 

A. Yes, I am. 


Page 101 


Q. Have you done this -- how are you 
familiar with this document? 

A. The reason for it is that I never 
got paid, never received a cent. And as I have 
stated to the Australia Taxation Office, I never 
received any money whatsoever from Craig Wright 
and why should I have to pay tax. 

Q. Okay. 

A. So, I got a tax bill for money I 
never received. 

Q. So, going to my question, that is 
how you remember a document like this? 

A. Yes. 

Q. Okay. So, I want to just go through 
this with you. 

Your name is on here under Employee, 

right? 

A. Yes. 

Q. And it does say Start Date: 
August 1, 2013, correct? 

A. Yes. 

Q. Then it says October 11, 2013, 
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Termination, right? 
A. Correct. 
Q. That is when you resigned? 
A. Yes. 
Q. You could take a second. But can 
you look at Annual Salary? 
A. Yes. 
Q. And you could look at them all. 
Are you the second highest paid 
person for this company? 
MR. FREEDMAN: Objection, form. 
THE WITNESS: Yes. 
BY MR. PASCHAL: 
Q. And how many employees are there on 
that list? More than 12? 
Yes. 
More than 14? 
Yes. 
So it is a significant amount of 


employees for this company? Correct. 
A. Yes. 
Q. And you are the second highest paid 


person? 

A. Yes. 

MR. FREEDMAN: Objection to form. 
BY MR. PASCHAL: 

Q. And you started in August of 2013, 
right? 

A. No, no. I didn't. If you have a 
look it was January, 8 of January, 2013. 

So that Christmas party that we 
asked before -- 

Q. Hold on, go ahead. 

A. That would have been in December. 
So that does work out. 

Q. So, the date on this, this goes, the 
date then the month then the year? 

A. Yes. 

Q. So, why is your resignation say here 
then November 10, 2013, if you resigned in 
October? 

A. That would have been Craig or who, 
or his bookkeeper who looked after the accounts. 


I would not have processed my own termination pay | 22 
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because I never received the payment. 

Q. Okay. But you were scheduled to be 
one of the highest employees, paid employees of 
this company, correct? 

A. Yes. 

Q. So, it is January, you are saying 
that you were employed January 8th of 2013. 

A. Yes. 

Q. And how many people started the 
company, well I guess with you? 

A. Well Ramona Watts. His wife. 
Myself and Craig. 

Q. Okay. 

A. And then I would live in Brisbane; 
Craig lives in Sydney. All of the business was 
done out of Sydney. I was flying back and 
forward. Craig was then on-boarding other people 
around him to start up Hotwire PE. 

Q. Okay. So, for nine months -- strike 
that. 

So in April Dave dies? 

A. Yes. 
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Q. You stay on with Hotwire in May, 
right? 

A. Yes. 

Q. You stay on in June, right? You 
stay on in July. You stay on all of the way 
until October or November? 

A. 23rd of October my resignation. 

Q. Okay. And at no time -- well are 
there any documents where you express concern to 
Craig that his demeanor has suddenly changed? 

A. No. 

Q. Are there any documents that any of 
their employees where you say Craig suddenly 
changed, something is wrong? 

A. But you -- the difference is I 
actually knew Craig prior to him on-boarding 
staff. 

I worked with Craig for quite some 
period of time with the technology of YDF. 

So, the advisory board that I had 
around me, and to one of them being our lawyer, 
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say, who is an attorney herself, that his 
demeanor did change over that period of time as 
well as Dr. Allen, I can't remember his surname. 

Q. Ijust want to go back to my 
question. 

Are there any e-mails or 
communications where you expressed to anyone 
during this 9 month or 10 month or 11 month 
period that Craig's demeanor suddenly changed 
when Dave died? 

A. No. 

Q. Did you ever express any concern 
when you served as CFO of Hotwire? 

A. No. 

Q. AsaCFO, and I guess there is a 
difference between CFO -- well does CFO involve 
tax duties? 

A. Itdoes. It can be, but we had a 
external party, BDO, who would look after the 
taxation part of it. 

Q. What is BDO? 

A. Itis one of the larger, well middle 
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tier accounting firms in Australia, equivalent to 


like an Ernst & Young here. 

Q. So it is a prestigious company? 

A. Yes. 

Q. And as CFO -- and your being an 
accounting CFO role for the company of Hotwire, 
right? 

That's right. 

Not Craig Wright? 

No. 

So, you owed some duties to the 
company, correct? 

A. Absolutely. 

Q. And in this entire period there is 
not a single e-mail or communication where you 
said I am concerned because Craig Wright's 
demeanor has suddenly changed. 

A. No, because he had the money to turn 
around and back it, as per his Bitcoin wallets. 

So I knew, it was all a very new 
thing for me and to understand Bitcoin as well. 
And so I thought well, I can see why 
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he has got the money to be on board and he has 
got the confidence to be able to bring these 
people on. 

This was very new for me. I had 
never had a background in technology. So, this 
is the first start. It was, I was leading Craig 
and following to understand how do you turn 
around and make something. For what he was 
doing, wanting to achieve. 

I mean some of the plans with the 
company were out of my depth with what he was 
wanting to achieve. 

So, it was interesting for me. I 
mean, he's a great futurist, so I could 
understand where he was going and what he wanted 
to do. 

But doing it the right way, and 
trying to put the right people around is where 
the challenge was for Craig. 

Q. Okay. You mentioned that you were 
CFO but there was a bookkeeper? 
A. Yes. 
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Q. Who was the bookkeeper? 

A. Ican't remember her name. 

Q. Okay. You can't remember her name. 
But what were her duties? 

A. She looked after the accounts on a 
daily basis and reported directly to Craig. 

Q. You testified earlier that that was 
unusual for you? 

A. To not do -- 

Q. To not do that as the CFO? 

A. Normally I would have full access to 
the accounts and have a Xero access. Xero being 
the accounting package, that is. 

Q. Okay. 

A. In this case, no. But then we are 
at the early days before we were on-boarding a 
whole lot of staff. 

So I knew that over a period of 
time, that the duties would increase. But, I 
didn't need to work in a full-time capacity. It 
was the early stages. It was a startup. 
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were CFO, 9, 10, 11 months you were CFO, did you 
ever express any concerns that there was a 
bookkeeper? 

A. No, I wouldn't express concerns of a 
bookkeeper. That makes total sense for the 
everyday expenditure to be taken up by someone to 
look after it. 

Q. So, that is completely okay then for 
you? 

A. Ihave no problems with that. It 
makes total sense. 

Q. Okay. And what were your duties as 
CFO? 

A. Ours was working through the cash 
flow. For me, it was, and why Craig brought me 
on, was the way that I had the discipline to be 
able to build YDF, and the culture around it. 

What Craig wanted was exactly 
similar to what we had. But the difference is on 
a greater scale, and he had a huge amount of 
money behind him to be able to back it, to be 
able to do it. 


Page 111 


Q. Okay. I'm showing you -- what am I 

on? 
MR. KASS: You are on 21. 
(Wilson Exhibit Number 21 
marked for identification.) 

BY MR. PASCHAL: 

Q. Iam showing you what we are going 
to mark as 21? 

What am I showing you? 

A. My LinkedIn profile. 

Q. Okay. When was the last time you 
updated this profile? 

A. Recently. 

Q. Did you draft this profile? 

A. No, my marketing, but I approved it. 
My marketing staff would have drafted it and then 
I signed off on it. 

Q. Who is your marketing staff? 
Nadine. 
Could you spell her name, please? 
N-A-D-I-N-E. 
What is her last name? 


A 
Q. 
A. 
Q 
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Scott. 
And can you spell that, too? 
S-C-O-T-T. 
. Is she here in your office in New 
York or Australia? 

A. Australia. 

Q. Okay. And ifI wanted to get in 
contact with her, how would I do that? 

A. Icould pass you her contact 
details. 

Q. What is her e-mail address? 

A. If you let me know by e-mail, send 
me an e-mail, and then I would be able to put the 
two of you connected together. 

Q. Okay. Now, if you turn to Page 3, 
can you look at the bottom where it says 
Education? 

A. Education. 

Q. Well let me ask you first -- 

A. Here, Queensland University of 
Technology. 

Q. So, let me ask you. You have a 
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marketing person looking at your LinkedIn, you 
take this seriously, right? 

A. Yes, the LinkedIn. 

Q. And you hold this out because people 
might use your company and want to look over 
information about you. Correct? 

A. That's correct. 

Q. So you would want to make sure this 
is accurate. Right? 

A. Yes. 

Q. You wouldn't put anything false in 
here, right? 

A. No. 

Q. And you wouldn't leave out any 
important information, would you? 

A. No. 

Q. Okay. Education, where it says 
Queensland University of Technology. 

A. Yes, QUT. 

Q. Accounting and finance was your 
degree? 

A. Correct. 
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Q. Did you take any classes in 
cybersecurity? 

A. No. 

Q. Did you take any classes related to 
the Blockchain? 

A. No. 

Q. Did you take any classes related to 
Bitcoin? 

A. No. 

Q. Did you take any classes related to 
cryptocurrency? 

A. No. 

Q. Did you take any classes related to 
cryptography? 

A. No. And J never make out that I 
have an IT background. 

Q. Okay. And then you go in from, I 
guess right after education you go into 
laboratory assisted patient accounts, correct? 

A. Correct. 

Q. You didn't have any background 
with -- 
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A. Ihave had no background whatsoever. 
It was only after my dad passing that I started 
to take an increase and understanding in cyber 
security. 
But even today, I do not read code. 
I have experts there in my office, and I do have 
a CISO, with a great background in cyber 
security. 
(Reporter requests clarification.) 
THE WITNESS: Ah. CISO, chief 
information security officer. 
Q. What is the name of your chief 
information security officer? 
A. Mark McPherson. 
Q. Is that the only person that you 
have in that capacity? 
A. Yes. 
Q. Do you have any computer scientists 
working for you? 
A. Yes, I have a data scientist as 
well. 
Q. What is that person's name? 
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A. Melissa Crossman. 

Q. And do you know their e-mail 
addresses? 

A. Yes, I do. 

Q. What is their e-mail address? 

A. Melissa.crossman@cryptoloc.com and 
mark.mcpherson@cryptoloc.com. 

Q. Okay. Can you go to the first page. 
So you say, "I took a fierce interest in cyber 
security solutions after two devastating events 
in my life." Right? 

A. Correct. 

Q. Would that be when you first had a 
passion for cyber security? 

A. After the loss of my father, yes. 

Q. And your father passed in 2011? 

A. Ten, so in October 2010, my father 
passed away. And it was through this process 
when I was trying to find a solution in the event 
that one dies, that you can find the will, the 
life insurance superannuation. 

Q. I'msorry, I need to ask you 
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questions. So that was an important -- strike 
that. 

When your father passed, it was 
important that you were able to find documents 
about him? 

A. Wellit was. We were fortunate to 
have dad for a 12-month period when he was 
terminal with cancer. 

And through that stage it was a 
challenge to find all of those important 
documents. And it was through that, that I had 
seen, I even said to dad it was lucky that he was 
alive, otherwise we never would have been able to 
find the information. 

Q. Okay. And I just want to ask you 
then, so, when he, and I know it is difficult to 
talk about some of this stuff, but I just want to 
know. 

A. Uh-huh. 

Q. You were able to get documents from 
him before he died because you had a window, 
right? 





MAGNA®©® 30 (Pages 114 to 117) 


LEGAL SERVICES 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 31 of 


: a 
FOoOwWO AAI HD OB WDN BP 








Page 118 


A. Yes, he was alive and we could use 
him to find the information. 

Q. But you, were you able to find 
documents? 

A. Yes, because he was alive. 

Q. Would it strike you as odd if 
somebody were to destroy documents after a family 
member passed away? 

A. Well, I suppose if they don't know 
the importance of it or a filing cabinet. 

I mean, hence why I created YDF was 
purely in event that I drop dead that my family 
and my two children would know where the 
information was. 

Being an accountant at that stage, I 
had a filing cabinet with a whole lot of 
strategies of clientele. 

Q. Yes. 

A. And I thought what a mess it would 
be that they would never receive their paperwork. 

So I wanted to make sure that in the 
event that I passed away, that everyone receives 
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the information, and that it would stand up in 
court. 

So hence why I created the 
technology and went on this road and journey to 
build it. 

Q. That is anoble process. I mean, 
that is important for people that you are doing 
that for, right? 

A. Itis. 

Q. Because it is important that if 
somebody passes they could get access to 
important documents. Right? 

A. Yes. 

Q. So, would it be odd to you if 
somebody were to throw away in the trash every 
piece of paper that their family member had? 
Without looking at them? 

A. Probably not. It depends on who the 
individual is. 

Q. Let's say it was your, I mean -- 

A. For me it is different. Like I 


would actually go through it. 
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It depends on the capability of the 
individual as well and the circumstances that 
they grew up in. 

Q. So, if they erased hard drives and 
threw out papers, that would be -- 

A. That would be strange. 

Q. Okay. Just to clarify, I'm going to 
show you a place on your -- actually, you said 
you became engaged in cyber security after your 
father passed in 2011, right? 

A. Yes. 

Q. Okay. 

A. ‘10. 

Q. On your LinkedIn, I don't know if it 
was just -- but it says 2010 is when you got 
involved with cyber security. 

A. Correct. So dad passed away in 
October of 2010. 

Q. Okay. 

A. And I even spoke to dad prior to him 
passing about it. 

Q. Okay. I got it. I'm sorry, if you 


wanted to keep -- 

A. No, go ahead. I understand. 

Q. Can you take a look at what was 
Plaintiffs 15? 

A. Yes, with the projects. 

Q. Mr. Freedman asked you if there was 
a common theme between all of these things in 
this e-mail, right? 

A. Yes. 

Q. The live feed here says you took 
about 20 seconds to read this e-mail, right? 

A. Yes. 

Q. Was that, and this is a two-page 
single space e-mail, right? Or one page? It is 
two pages, right? 

A. Yes. 

Q._ -- let me go through here. 

Do you see the -- let's go to the 
fourth category. 
MR. FREEDMAN: Excuse me, counsel. 
Could you tell me the Bates label on the 
bottom of the page? 
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MR. PASCHAL: Yes. It is 0043726. 
MR. FREEDMAN: Thank you. 
MR. PASCHAL: Let me know when you 
have it. 
MR. FREEDMAN: Go ahead. 
BY MR. PASCHAL: 

Q. So, if you go down to the fourth 
where it says Video System. 

A. Yes. 

Q. Replacement for Adobe and 
GoToMeeting. 

A. Yes. 

Q. What does that have to do with 
Bitcoin? 

A. What he was trying to set up, Craig 
Wright, is the ability for, where you could go 
into an environment, be able to negotiate and 
then you would be able to use Blockchain, pay in 
Bitcoin for the end of an agreement. So, ofa 
party. 

Mainly if there was a legal problem. 
And that as long as everyone was happy with the 
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outcome of it, then the money would be 
transferred. 
If not it would stay as an escrow 
and then other legal professions would be able to 
come in and voice their opinion and the money 
would be dispersed at a certain percentage. 
Q. Okay. But going back to my 


question, though. 
How is that related to Adobe or 
GoToMeeting? 
A. It was an improvement of what Adobe 
and GoToMeeting is. 
It is the ability to be able to use 


Blockchain to be able to escrow or escrow the 
money with the Bitcoin and to be able to have a 
background so you could actually track it all 
back from those meetings. 

Q. So, the process of Adobe and 
GoToMeeting could be similar or, or Bitcoin, let 
me say. 

A. Yes. 

Q. Could be similar or the same as 
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GoToMeeting or Adobe? 

A. It would be new technology. But, 
you would be able to put it on the Blockchain. 

Q. Was that technology ever developed? 

A. I left in October 2013. This is 
August 2013. These were projects where he was 
scaling his staff to be able to deliver. 

Q. Okay. So -- hold on. So, the 
Reputation Systems, think LinkedIn, do you see 
that? 

A. Yes. 

Q. But with the tracking against 
training? 

Yes. 

That is related to Bitcoin? 

Blockchain. 

Let's say Bitcoin first. 

All of these projects here are 
Blockchain-related, which then could turn around 
and have Bitcoin as well. 

So when you are looking at the 
LinkedIn, turning around and putting to 
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qualifications, et cetera, you run it off the 
Blockchain. 

However you are able to send 
information and be able to be paid in 
remuneration with the Bitcoin. 

Q. So, I want to clarify this 
Mr. Wilson, because earlier you said the common 
point is Bitcoin? 
A. Secondary is Bitcoin. 
Q. So, the common theme is Blockchain? 
A. Blockchain is all of this. All of 
it is Blockchain as we understand. Blockchain is 
the underlying technology of Bitcoin. 

So, all of this does come back into 
receiving money and funds. 

Q. Okay. But there is a lot of 
different technologies that stemmed from 
Blockchain, correct? 

A. Absolutely. 

Q. Is the technology used at YDF, is 
that Blockchain? 

A. Absolutely not. 
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Q. Do you think it is better than 
Blockchain? 

A. Yes, I do. 

Q. Is that based on your cyber security 
experts, data scientists, and developers? 

A. Yes. 

Q. And that -- 

A. When we, the reason for it is in 
regards to privacy. 

Blockchain doesn't give you the 
privacy, and that is, it is a public ledger, and 
that you can track all of the transactions, 
understand what an individual is doing, be able 
to do a 51 percent of tech. 

There is plenty of information now 
from the MIT which has come out and said we 
realize that there is problems with scaling and 
also the privacy around Blockchain. 

Q. Okay. 

A. Ihave done a closed ledger, you 
know, with cryptography with an escrow being our 
point of difference which we have patents on a 


global stage as well. 

We actually could run a digital 
currency off our Cryptoloc technology if we 
wished and it would be a lot quicker and give the 
privacy. But we would work with law enforcement 
as well. 

Q. Would that put you in competition 
with Bitcoin? 

A. Would it put us in competition? It 
would if I did want to run out a digital 
currency, but it is not on my agenda. 

Q. Oh, and do you have any 
communications with Diane Pinder? 

A. Not recently. 

Q. Can you tell me the substance of 
your communication was Diane Pinder? 

A. Diane Pinder was an advisory board 
member with YDF in the early days. 

And since then, so, many years now. 

Q. Uh-huh. 

A. Probably 2014, 2016 -- it would have 
been 2014. 
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It is the same year after I resigned 
Diane finished up at Lloyd solicitors in a 
capacity as one of the principal lawyers. 

And then I haven't remained 
connected to Diane. 

Q. Can you go back to your LinkedIn 
page? 

A. Yes. 

Q. Earlier you testified you would make 
sure that this information was accurate. 
Correct? 

A. Yes. 

Q. And you would make sure that 
everything is in here that is necessary. 
Correct? 

A. Yes. 

Q. And you wouldn't leave out anything 
that was important? 

A. I could leave out something. 

Q. Earlier you testified that you would 
not leave out anything important. Iam 
clarifying your testimony. 
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A. Well, only sensitive information 
such as the clientele that I was looking after. 
It is not relevant to a LinkedIn profile. 

Q. So it wasn't relevant that you were 
involved with Hotwire? 

A. No, and I didn't turn around and add 
Hotwire PE or any of the group of companies at 
all to my LinkedIn profile. 

Mind you, back in those days I 
really didn't use LinkedIn. 

Q. You said you were CFO and 
shareholder of several companies with Craig 
Wright, right? 

A. Yes. The group of his companies he 
appointed me as CFO and director. 

Q. And none of these are on your 
LinkedIn. Are they? 

A. No. 

Q. And those companies had issues with 
the ATO, correct? 

A. Yes. 

Q. And you were copied on e-mails with 
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the ATO? 

A. Yes. 

Q. And you left all of them off of your 
experience, correct? 

A. Yes, because I wasn't -- Craig ran 
the matters himself. 

It would be different if I ran the 
matters. 

I'm not going to turn around and put 
myself out as the CFO when he is looking after 
all of the matters. 

Q. And again you were CFO for nine 
months, right? 
A. Yes. Well -- 
Q. And during that nine months did you 
ever e-mail the ATO and say something is wrong? 
A. No, why would I? 
Information was only supplied as we 


were doing the R&D and the Australia Taxation 


Office trying to come up with the numbers. 
Q. And earlier you said -- I just want 
to make sure I get it right. You said that after 
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Dave died, you were uncomfortable with the 
documentations for the companies? 

A. That's correct. And when did I 
receive the documentation, and the accounts, it 
all started coming through from beginning of July 
when our end of financial period was ended on the 
30th of June. 

And then when I had to start putting 
the tax returns and the R&D forms all together 
and Craig actually even did the numbers himself 
and then would hand them to me. 

So, even down to legal work. Craig 
looked after a lot of his legal work, he would 
look after his accounts and then it would be 
handed over to me and then I would have to go 
through them. And then I would ask questions and 
then we would try to work it out. 

And then that is when I turned 
around and said I don't feel comfortable. 

Q. Okay. 
A. And that is why I never lodged them. 
And Craig actually lodged them himself. 
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Q. So, from January to July I guess 
there weren't any documents that you were looking 
at, because you didn't get them until July? 

A. That's right. 

Q. So, what were you doing from January 
to July with Hotwire? 

A. Trying to have a look at okay, what 
is the best way moving forward. How do we turn 
around and increase the staffing, because things 
don't happen that quickly anyway. 

And the staff, if you have a look, 

they were really only started in May, June, June. 
It was late. It wasn't -- 

Q. So, what were you doing to complete 
those tasks that you have just mentioned? 

A. Well that was my issue. I didn't 
have enough information, nor a whole lot of task. 

It was all about the projects that 

Craig was involved in and his background with 
Bitcoin and understanding the knowledge of 
Blockchain. 

Q. Okay. So from January to July you 
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had an issue, because you didn't have -- could 
you clarify what was it that you didn't have? 

A. There was no accounts that were 
required to be done or completed. 

Q. Okay. 

A. All of it was to do with the 
transfer of information and license agreements 
and things like that. 

So, it was more of a legal over an 
accounting. 

Q. Okay. And so, did you, are there 
any e-mails or documents or, did you have any 
communications where you expressed concerns that 
you weren't doing anything for the seven-month 
period? 

A. There was no work to be done. As in 
there was nothing from the accounting point 
because the bookkeeper was there. So a lot of 
mine was strategy with Craig and sitting and 
understanding, okay, how do we actually structure 
this to be able to move forward. 





Q. So, Hotwire agreed to make you the 
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second highest paid employee and you did nothing 
for seven months? 
I never got a cent anyway. 
Okay. 
But I still had to pay tax on the 
money. And if you go and have a look at the 
records, I also put the down deposit down for the 
rental property that Craig never paid me back as 
well. And all of the travel back and forward out 
of Sydney and accommodation expense and 
expenditure was never reimbursed as well. 
Q. Are you upset about that? 
A. I think it is unethical. 
Q. Okay. 
A. You would do the right thing. If 
you are delivering and you are working and doing 
your duties, and your jobs and you want to be 
part of a project, well then you should pay. 
Q. Were you monitoring this case? 
Monitoring? 
A. No. It actually was Steve Lipke who 
made me aware of it. 
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Q. And then you reached out and 
congratulated Mr. Freedman? 

A. Yes, I did. And the same reason I 
never got paid, that team down in Sydney did not 
get paid. They were loaning money off family and 
loved ones to be able to afford to pay their rent 
and keep afloat. 

They were in quite a state. And 
still have not recovered. 

Q. And you said that when you were, you 
resigned your shares were just taken from you, 
right? 

A. That's correct. 

Q. How did you feel about that? 

A. No, acceptable. I never argued. I 
didn't dispute. I, I was only wanting what I was 
entitled to and that was the money, the physical 
cash that I was out of pocket with. 

But then the lawyers got involved 
down in Sydney as part of the administration, and 
said no, that is an individual matter for Craig. 


We are not paying you anything. 
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Q. And, were any other the lawyers that 
you spoke with other than Mr. Freedman? 

A. No. 

Q. You said the ATO is asking you to 
pay taxes on income that you would have made at 
Hotwire, right? 

A. That's correct. 

Q. But you are saying you did not make 
income -- 

A. Idid not receive one cent. And you 
can go through all the bank accounts and you will 
notice that I never received one. It was only me 
sending money to Craig and never being 
reimbursed. 

Q. And in January did you complain that 
you hadn't been paid your salary? 

In January? 

Of 2013. 

No. 

And in February of 2013, did you 
complain that you hadn't received your salary? 

A. To be honest I didn't expect to 
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receive a salary. And I didn't even, wasn't 
aware of the Document 20, this here, that I 
believe is what you received from the 
administrators, of when they were looking after 
and winding up the company. 

That's the only way, reason I've got 
knowledge of it as well. 

Prior to that it was with the 
payment summary that came in, and the ATO said I 
received money and I said no, I didn't. 

But, that is how this documentation 
also was supplied to me. 

Q. Okay. 

A. So, no, I didn't expect to receive 
any money. Otherwise it would be strange if I 
turned around and said no I didn't take any 
money. 

Q. Okay. So, your payment, what was 
your payment for being CFO? What was your 
expected payment? What, were you getting out of 
being CFO. 

A. It was supposed to be an annual 





MAGNA®© 35 (Pages 134 to 137) 


LEGAL SERVICES 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 36 of 


PoR 
FOWU ANA VU BWDNP 





Page 138 


salary of what is here, 150. But it never 
commenced. 

But, I wasn't worried anyway. 

The issue is, I wasn't concerned, 
because we were in the stages of doing a setup, a 
startup. 

Q. Okay. 

A. During that period of time, I didn't 
understand the whole, you know, the Bitcoin, the 
wallets, and how much money. 

So, I had to get all of that 
training. So, I was happy to turn around and 
spend the time and learning, purely because of my 
history with Craig, and being an advisory board 
member of YDF and the relationship there. 

So that's why I was more than happy 
to turn around and wear it. Once the companies 
got money, then I would get paid but then my 
duties would increase. But we never got there. 

Q. So, earlier, earlier Mr. Freedman 
asked you about whether or not you knew that 
Dr. Wright's Bitcoin was locked up in an 
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encrypted file. Do you recall that line of 


questioning? 
A. Yes. 
Q. And he asked you several times? 


A. And was he able to get, and was he 
not able to get access to it. 

Q. Let me break that down. 

Do you know how Craig Wright 
obtained Bitcoin? 

A. Through mining. With Dave Kleiman, 
that was my understanding. 

Q. What is your understanding based on? 

A. From Craig saying that it was 
working with a great mate who was in the U.S., 
Dave. And they set up Bitcoin and that it was 
Hitoshi -- 

Q. Were those the statements to you, 
were there any other statements that you recall 
right now? 

A. No. No. 

Q. So, from those statements, you -- 
well, let me back up. 
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Craig Wright never told you that he 
mined with Dave? 

A. Yes, he did. 

MR. FREEDMAN: Object to form. 
BY MR. PASCHAL: 

Q. Well, when did he tell you that? 

A. Well that is how I knew all about 
the Bitcoin and his wallets. 

Q. Mr. Wilson, I asked you a second ago 
what were all of the statements that Mr. Craig 
Wright made to you to make you think that. 

You did not say that Craig Wright 
said I mined Bitcoin with Dave. 
MR. FREEDMAN: Object to form. You 
are mischaracterizing. 
MR. PASCHAL: He did not say that. 
That is why the live feed is helpful. 
THE WITNESS: You know, Dave, not 
Dave, Craig, had been mining it for quite 
some time. 
BY MR. PASCHAL: 
Q. Well, let me ask you -- I'm sorry, 


are you finished? 

A. Yes. 

Q. Okay. If Craig purchased Bitcoin, 
would you have known that he purchased it? 

A. Well you could track it back, 
absolutely, through the ledger. I mean there is 
a history, there is an audit trail. 

Q. Do you know if -- well, do you know 
if Craig Wright purchased Bitcoin? 

A. No, I don't. 

Q. So, if he purchases Bitcoin, you 
wouldn't know if it came, that could be his 
Bitcoin holding, correct? 

A. Correct. 

Q. So, you are not sure if he mined 
that Bitcoin then, am I -- 

A. Oh, no, he definitely mined it. He 
even got new servers, et cetera, that ran in his 
garage. 

Q. Okay. But let's say his garage was 
closed down and he removed all of his equipment. 

A. Right. 
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MR. FREEDMAN: Object to form. 
BY MR. PASCHAL: 

Q. Would he have been mining anywhere 
else. 

Absolutely you can. 

Well not anyone can, he can? 

He has the ability to be able to do 
it on a mobile device. 

I mean, it might blow the phone up 
but you still have many other options of being 
able to mine the Bitcoin. 

Q. Do you think he was mining on a 
mobile device? 

A. No. 

Q. Okay. 

A. But if your question was do you 
think that he had been doing -- mining Bitcoin, 
absolutely. 

Q. But I'm going to go back to my 
question. Do you know, other than his garage, 
was he mining Bitcoin? 

A. Yes. 
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Q. And how do you know that? 

A. Because he told me so. 

Q. Okay. And when he told you, was he 
saying that this is the Bitcoin that I mined in 
my garage, do you know? 

A. No. But that is not relevant, is 
it? 

Q. Well, I'm asking you -- 

A. Well, I don't think -- 

Q. Did he say he was mining in his 
garage and you don't know? 

A. No. 

Q. So, if he purchased Bitcoin 
afterwards, you wouldn't know? 

A. No. 

Q. Okay. And do you know how much he 
mined, exactly? 

A. No. Because he already had a huge 


amount of Bitcoin as per the wallets. 

And when Craig said to me this is 
where my wallets are and this is the amount of 
Bitcoin that I have mined it, well then, I mean 
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it was all new to me. So I would have to break 
it down. 
But, the wallets are there. Craig 

has e-mailed them through. 

Q. Okay. 

A. And I can't see Craig having that 
sort of wealth to buy the Bitcoin when he was 
driving around in hoodies and also, you know, in 
a, ina very cheap car. And a rental property. 

Q. Did you have access to any of 
Dr. Craig Wright's financial records when he had 
a hoodie? 

A. No. 

Q. Did you see his bank account 
statements? 

A. No. 

Q. Did you see what he was spending to 
buy computers? 

A. No. 

Q. Okay. And let me ask you, when did 
you stop speaking to Craig Wright? Or did you 
stop speaking to Craig Wright? 


It is years ago. 
Huh? 
Years ago. 
Can you give me a date? A year? 
Two, three. 
Two, three years ago? 
Yes. 
. And what made you stop speaking with 
Craig Wright? 
A. I didn't like the way he went about 
business. The ethics and morals. 
Okay. 
The way he treats people. 
Did he treat you bad? 
No. No. He was pretty good with 
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Okay. And when Craig Wright, you 
saw these Bitcoin wallets, did you ever see Craig 
Wright transfer Bitcoin to anyone? 

A. No. See, I, I have never seen any 
Bitcoin transfer at all. All I have ever seen is 
the wallets on a screen, or the ones that he has 
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e-mailed through. That is it. 

Q. So, if Craig Wright had his Bitcoin 
encrypted, and you never saw any transfers, how 
would you be able to say that they weren't 
encrypted? Is it just that he said he never told 
you that? 

A. Craig would log into them. So, I 
know that he could access them. 

Q. Okay. And when did you see Craig 
log into Bitcoin? 

A. Oh, several times at his home 
address. 

Q. Okay. And what would you see? 

A. Oh, the accounts, his wallets, and 
then he showed me how it works. 

Q. And what computer, was it a computer 
that he was showing you it on? 

Yes. 

Was it like a laptop? 
Oh, I can't remember. 
Okay. 

It was at his home. 


And how many years ago was that? 
Oh, that would have been 2013. 
. And in what home was that? 
. At Howard Street at North Rye, I 
think it was. 


Q. But you did not see him transfer 
Bitcoin or move Bitcoin? 

A. No, but there was no reason for him 
to do that in front of me. 

Q. Okay. So, if you could log into the 
screen, right, you could see Bitcoin. 

A. Yes. 

Q. But, if it was encrypted, then he 
couldn't move them. You wouldn't know that, 
right? 

A. Well, once you log-in and you've got 
access to it, you would be able to send money, 
receive money. 

Q. Did you see the private keys that 
Craig Wright had? 

A. Only what was on the screen. But, 
they are not -- no, the wallets only. 
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Q. So you never saw a private key? 
A. No. 
MR. PASCHAL: We are going to take a 
break for a second. 
THE VIDEOGRAPHER: Off the record at 
11:04. 
(Recess taken -- 11:04 a.m.) 
(After recess -- 11:20 a.m.) 
THE VIDEOGRAPHER: We are back on 
the record at 11:20. 
BY MR. PASCHAL: 
Q. Mr. Wilson, what did you discuss on 
the phone with Mr. Freedman? 
A. When I was travelling back into the 
U.S., would I be available to catch up. 
Q. Well, how many phone conversations 
did you have with Mr. Freedman? 
A. Around about three. 
Q. Okay. And they were three separate 
e-mails, also? 
A. Well, yes, there were e-mails going 
back and forward. But some of them are very 


short. Iam happy to supply them. 

Q. Just focusing on the phone 
conversations. 

A. Uh-huh. 

Q. What did you discuss with 
Mr. Freedman? 

A. Inregards to the social media posts 
that Craig put up about myself, talking ill of 
me, did I have any supporting documents? And I 
said yes I would share them with you. 

Q. What did you say about the posts 
that Dr. Wright said about you? 

A. I wasn't aware of it. I actually 
had to go and search it myself. 

Q. Okay. 

A. I wasn't aware at all. 

I actually wasn't even aware of the 
case until Steven Lipke made me aware. 

Q. Who was Steven Lipke? 

A. He was one of the operations 
managers for Craig Wright out of Sydney. 

Q. Okay. For -- 
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A. Imean, even now, for today's 
meeting, somehow it has been also on, there is an 
article about it, that I was coming in and he 
made me aware of it, too. 
Steven Lipke did? 
Steven Lipke did, yes. 
And where does Steven Lipke work 


I'm not sure. 
How does he communicate with you? 
He will send me a phone call, he 


fay 


will send me an e-mail. 
Q. What is his e-mail address? 
A. Icouldn't tell you. I would have 
to look it up. It is not someone I go back and 


hb 


ray 


ray 


forward. 
Now and then he would just sort of 
pop up and, I mean, I haven't even caught up with 


ray 





Steve in, well, for quite some time. 
Q. And where does he live? 
In Sydney. 
Do you know his phone number? 
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I would have to look it up for you, 


I don't. 
Q. Where would you look up his phone 
number? 


Out of my cell. 
Do you have your cell on you now? 
Yes. 
Can you please look at his number? 
. Yes. 
MR. BRENNER: For the record, 
Mr. Freedman is dealing with a personal issue 
so I just stepped in. 
THE WITNESS: Okay he was the 
project manager. 
BY MR. PASCHAL: 
Q. And what is his phone number? 
A. Plus 61-417-261-542. 
Q. Does your contact info also show his 





e-mail address? 
A. Yes, it does. 
Q. Can you please provide that tome? 
A. Lipke_ s@hotmail.com. 
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Q. And have you ever spoken to Ira 
Kleiman? 

A. No. 

Q. Have you ever looked up any 
information about Ira Kleiman? 

A. No. Oh, yes. And I had an e-mail 
that she was originally involved right at the 
early days of it. 

What e-mail? 

I would have to have a look. 

Who was the e-mail between? 

Craig Wright. 

And who else? 

Myself. And probably Ramona Watts. 
And it discussed Ira Kleiman? 

Ira was involved in the e-mail. 
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He was a recipient or was he 
discussed in the e-mail? 

A. No, no, no, no. A recipient of the 
e-mail. 

Q. And what did the e-mail discuss? 

A. It was just general information. 
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The only reason I'm aware of it, 
because it came up and said we have never met 
Ira. I actually thought it was a -- wait, is 
that Kleiman? 

Q. Ira Kleiman. 

A. No, no, I had no correspondence 
whatsoever. 

Q. Okay. 

A. There was another person that Craig 
was involved with, and it was a lady. I can't 
remember her name, though. 

Q. But her name was Ira? 

A. No, no. It was a Chinese name. Or 
an Asian name. 

Q. Okay. 

A. Ihave had no correspondence 
whatsoever from the Kleiman family. 

Q. Could you just spell Lipke, the 
e-mail address that you had in your phone? 

A. L-I-P-K-E_S@hotmail.com. 

Q. And when did you start working with 
Craig Wright? 
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A. It would have been the end of 2011, 
2012. 
Q. Okay. And did you develop a patent 
with Craig Wright? 
A. Ialready started the process 
because I came up with the concept in 2010. So, 
the patents was already underway. 
And, then Craig, I got Craig 
involved and said -- 
Q. Let me just ask you -- so, how did 
you start the process? 
A. Because I -- 
MR. BRENNER: Object to the form. 
THE WITNESS: Because when I was 
looking for the solution, and I couldn't find 
it. So I went to a patent attorney, from my 
commercial lawyers. He said go to a patent 
attorney and see if you can find it. 
And they said Jamie, there is 
nothing out there on a global stage. And I 
said you've got to be kidding, I mean it 
makes sense to me. 
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BY MR. PASCHAL: 

Q. Just to clarify, what was the stage, 
for what? 

A. In the event of losing a loved one 
that between an escrow and a cloud provider that 
the information would be released. 

So I already started the process. 

Q. So when you say the process, do you 
refer to the idea? 

A. The concept, yes. 

Q. But you didn't actually start the 


whole programming and putting together and coding |1 


or anything? 

A. Yeah, I did before Craig come along. 

Q. But you didn't? 

A. Physically, no. As I said, I don't 
write code. I don't have an IT background. I 
make it very clear, I do not have an IT 
background. I do not develop. 

Q. Who did that for you? 

A. Drew Nicholas. 

Q. Can you spell that for me, please? 
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A. D-R-E-W, and Nicholas, 
N-I-C-H-O-L-A-S. 
Q. Okay. And how did you know Mr. Drew 
Nicholas? 
A. Iwas looking for an IT company with 
developers to be able to develop it. 
Q. And do you still talk to 
Mr. Nicholas today? 
Yes, I do. 
Did Mr. Nicholas meet Craig Wright? 
Yes. 
Did they work together? 
Craig was only advisor. Craig never 
got involved in code. 
Q. Okay. 
A. Craig wasn't involved in any of the 
coding or development of it. 
(Wilson Exhibit Number 22 
marked for identification.) 
BY MR. PASCHAL: 
Q. I'm showing you what we are marking 
as 22. 
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So is this one of the patents that 
you and Craig Wright put together? 
Correct. 
Okay. And it was registered in 


That's correct. 
October 28, 2011? 
Yes. 
. Okay. So, when did Craig come on 
board with this patent? 

A. Craig was only added as a name. I 
had to change all of the documentation. 

So Craig came on around about 2012. 

Q. So, you were just using his name for 
the patent? 

A. No, no, no. Because Craig said to 
me, well, I needed a local and I wanted to make 
sure that I had all of the I's dotted and the T's 
crossed. 

Q. Uh-huh. 

A. So, Craig was even paid handsomely 
for his time as well to oversee it, which was 
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wrong, and I still had to get my patents 
attorneys to go through it. 

So, Davies Collison & Cave were the 
ones who actually looked after the patents as 
well. 

And Craig, and naturally because he 
was paid, it was my concept, the process already 
started, he had to sign, make sure that we got a 
signoff that he had no rights to it? 

Q. So, when you list Craig Wright and 
you as the inventor, is that incorrect? 

A. No. Because Craig was also an 
advisor. Same with my lawyers and people like 
that. 

Q. Well, would your lawyers be listed 
as an inventor? 

A. Well that was from the legal point. 
Craig being IT and that this documentation was in 
regards to the IT side, that is why it was 
listed. 

Q. Why isn't Mr. Drew, why isn't Drew 
listed on here as an inventor? 
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A. Drew was a developer. It was, well 
my concept. Originally, it was just my name on 
all of the documentation. 

Then Craig wanted to get more 
involved in it and I said well you should be 


probably listed as an inventor as well. And that 


is how he got his name on it. 

Q. But you said he did some advising to 
get this, right? 

A. He was involved, we had already done 
all of the paperwork and all of the knowledge and 
how it worked system-wise. 

And then Craig came on later on down 
the track. 

And then I wanted Craig as a 
director and an advisor to ensure that we were 
moving in the right direction. 

So, his expertise is what I was 
using to ensure that the I's were dotted and the 
T's were crossed. 

Q. Good memory. 

Was Dave involved, Dave Kleiman 
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involved in any way in this patent? 
No. Not at all. 
Do you use any of this patent today? 
This is my technology. Cryptoloc. 
This is your technology? 
Yes. Cryptoloc, absolutely. 
And it involves cryptography? 
That's correct. 
. And would it be wrong to say that 
Dave is entitled to half of this? 
A. How could he be entitled to half of 
it? How could Craig be entitled to half of it. 
Q. I'mjust asking. Would it be wrong 
to say that Dave Kleiman is entitled to half of 
this, your property right now, your intellectual 
property. 
A. Absolutely not. 
MR. FREEDMAN: Objection to form. 
MR. PASCHAL: It would be correct? 
THE WITNESS: No, he is not entitled 
to it at all. 
MR. FREEDMAN: Objection to form. 
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THE WITNESS: Nor is Craig Wright 
entitled to it. 
BY MR. PASCHAL: 

Q. Okay. So, if you were to -- I just 
want to -- have you ever amended the information 
on this patent? 

A. Why would I? 

Q. To remove Craig Wright as inventor. 

A. No, Craig Wright signed off all of 
his rights to be able to take any claim against 
it. 

Q. Okay. And -- 

A. And that is all done under Davies 
Collison & Cave; they are patent attorneys. 

Q. Okay. And when did Craig Wright 
sign that document? 

A. Oh, I'm not sure. Davies Collison & 
Cave would have the date. It was at the 
beginning stages, because Craig was paid, 
physically paid money to it. 

Q. It couldn't have been early 2011, 
right? 
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A. No, it wasn't. It was '12. I 
already started the process with the patents 
before Craig came along. 

Q. Okay. 

A. So, if you go and have a look at the 
history of it, you would notice that I was the 
only inventor. 

Q. But, so you are saying that Craig 
wouldn't have interest in it because he signed 
over any of his rights? 

A. That's correct. Well he didn't have 
the concept. It was me who came up with the 
concept. 

Q. Okay. So I just want to clarify, 
though -- 

A. Craig -- 

Q. -- would you think that it would 
have been an accurate statement to say that Dave 
Kleiman, the estate of Dave Kleiman is entitled 
to half of this? 

MR. FREEDMAN: Objection to form. 
THE WITNESS: Why would you think 


that, though? 
BY MR. PASCHAL: 

Q. I'm just asking the question. 

A. Well if you think about it, I 
started the process. I had the concept. The 
patent was lodged prior to them coming on board. 
Well, prior to Craig even being involved in the 
business. 

So, how could Dave, who I didn't 
even know, and Craig Wright, who I didn't even 
know at that stage, be involved or entitled to 
the patent. 
BY MR. PASCHAL: 

Q. Could Dave have been working on this 
with -- could Craig have been working on this 
with Dave without your knowledge? The task that 
you told them? 

A. They had no access to them. They 
never had access to the source code. 

Q. So, how was Craig making sure that 
all of your T's were crossed and your I's were 
dotted? 
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A. It was through the lawyers and it 

was just paperwork. It wasn't technology. 
It was documentation. 

Q. So, you hired Craig Wright to be, to 
look at this? 

A. Yes. 

Q. As -- well, let me -- so, Craig 
Wright at this time he is wearing his hoodies? 
Yes. 

He is into his IT? 

Yes. 

He is into his developer? 

Yes. 

. So, you wouldn't hire him as a 
lawyer? 

A. No, Craig Wright as an expert in, a 
cyber security expert. 

Q. And that is why his name was on here 
as an inventor? 

A. That's right. 

Q. As inventor -- 

A. Okay then, as an inventor. 
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Q. Okay. And, there is a document, I 
haven't seen it, but he has signed, you said he 
waived his rights to this? 

A. Absolutely. 

Q. In 2012? 

A. Before we even started, or I got 


Craig involved. 


I mean naturally I'm not going to 
turn around and hand a concept over and have 
people like you look at me and try to take half 
of the technology. 
Q. It wouldn't be me. 
A. Iknow where you are trying to go, 
though. 
Q. I don't think you do. 
And so, just to be clear, if you 
look on, if you look at the document on the 
right-hand side of application U.S. 14/354359 
events, nowhere in here does it say that Craig 
Wright, or did you amend this patent to remove 
Craig Wright, correct? 
A. DidI-- there was movement back and 
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forward with Davies Collison & Cave. So, Davies 
Collison & Cave would have the history and the 
documentation, et cetera, that was needed to be 
done in the process. 

Q. And let's say in his advisory role 
Craig Wright, as the inventor, as an IT guy 
wearing his hoodie had conversations with Dave 


OarAn oO PF WN FP 


Kleiman to develop this intellectual property or 


Ke) 


to do anything with it. I mean let's say Craig 
didn't tell you. Well first did Craig ever tell 
you that? 


PrP FR 
NO RP oO 


A. No. It was all done in-house. I 


a 
Ww 


mean, Craig may have had conversations with many 


bh 
d 


people about it. 


an 
oO 


But, it was all done in-house; it 
wasn't -- 
Q. Did you ever get a document from 
Dave Kleiman saying he would waive any of his 





interests to this patent? 

A. Idon't see how Dave could be 
involved in it. 

Q. Let's assume that a court ordered 
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that that intellectual property belonged -- 

A. It wouldn't be involved. 

MR. FREEDMAN: Objection to form. 

BY MR. PASCHAL: 

Q. You didn't get a waiver from Dave 
Kleiman, did you? 

A. No. I don't need to. 

Q. Okay. So, Mr. Freedman asked you 
about hacking earlier? 

A. With Craig Wright, the e-mails being 
hacked. 

Q. So, hacking can happen, do people 
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know exactly when a hack happens? 
A. Not -- no. Not thoroughly. 
Q. Imean part of that, I mean the 
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hacking could be something that, in fact, I don't 
know if I need to pull it, but on your website 
you expressed that hacking could be something you 





learn of much later. Right? 

A. That's correct and it is public 
knowledge. 

Q. And it is something even savvy 
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people need protection, because hacking can 
happen? 

A. And your e-mails are one of the 
weakest links. 

Q. And so if Craig Wright were hacked, 
and he just, is there some foolproof way that he 
would know right away? 

A. No. 

Q. Okay. And if he learned many years 
later, is that something that you see as uncommon 
in your line of work? 

A. No. 

Q. Okay. And, I think I am pretty 
much -- just one second. 

MR. PASCHAL: I think we are good. 
That is it. 
FURTHER EXAMINATION 
BY MR. FREEDMAN: 

Q. Ihave five questions for you, well 
maybe a little more, but we will get you out of 
here. 

Did you ever respond to an e-mail 
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from Craig and receive back an e-mail, I don't 


know what you are talking about, I didn't send 


this e-mail? 
A. I don't know what you mean. 

MR. PASCHAL: Objection to form. 
BY MR. FREEDMAN: 

Q. Well we were talking about whether 
or not the e-mails were hacked. 

My question is, did you ever respond 
to an e-mail from Craig, either orally or via 
e-mail and receive a response from Craig saying I 
didn't send that e-mail. It is a hacked e-mail? 

A. No, I didn't even know he was 
hacked. 

Q. Mr. Wilson, can you take a look at 
Plaintiffs Exhibit 1 for me, or Wilson 1 for me. 
And, those are the resignation 

letters? 

A. Yes. 

Q. Can you read the companies you 
resigned from? 

A. Coin Exchange, Hotwire Preemptive 
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Intelligence, Interconnect Research and Integers. 

Q. Inoticed that, and actually you 
noticed, Mr. Wilson, during a break you mentioned 
this to us, that there was missing W&K was 
missing from the resignation. 

A. That's correct. 

Q. Why is that? 

A. Because I didn't even know I was a 
director. 

MR. FREEDMAN: No further questions. 

MR. PASCHAL: No further questions. 

All right, I think we are done. 

MR. FREEDMAN: You have a right to 
read your deposition and you can correct 
inaccuracies that you believe are there, or 
you can trust the court reporter did her job. 

Do you elect to read it or do you 
waive your right to read it. 

THE WITNESS: I will waive my right. 

THE VIDEOGRAPHER: All right, if 
this is everything, we are off the record at 
November 8, 2019, at 11:39. 
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(Whereupon, signature having been waived, 


the deposition concluded at 11:39 a m.) 
* OK OK 
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CERTIFICATE OF COURT REPORTER 
UNITED STATES OF AMERICA ) 
DISTRICT OF COLUMBIA _ ) 

I, LORI J. GOODIN, RPR, CLR, CRR, the 
reporter before whom the foregoing deposition was 
taken, do hereby certify that the witness whose 
testimony appears in the foregoing deposition was 
sworn by me; that the testimony of said witness 
was taken by me in machine shorthand and 
thereafter transcribed by computer-aided 
transcription; that said deposition is a true 
record of the testimony given by said witness; 
that I am neither counsel for, related to, nor 
employed by any of the parties to the action in 
which this deposition was taken; and, further, 
that I am not a relative or employee of any 
attorney or counsel employed by the parties 
hereto, or financially or otherwise interested 
in the outcome of this action. 





LORI J. GOODIN, RPR, CLR, CRR, RSA 
Notary Public in and for the 
District of Columbia 

My Commission expires: May 14, 2021 
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23 October 2013 


The Directors 
Coin-Exch Pty Ltd 
43 St Johns Avenue 
Gordon NSW 2072 


Dear Craig 


!am no longer able to continue as a director of the company and hereby submit my resignation to 
take effect immediately. j 


ji 
fi 
ly 


Cir“ 





DEFAUS_00108905 
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23 October 2013 


The Directors 
Hotwire Preemptive Intelligence Pty Ltd 
43 StJohns Avenue 

Gordon NSW 2072 


Dear Craig and Ramona 


1am no longer able to continue as a director of the company and hereby submit my resignation to 
take effect immediately. ji 

fff 

; 


Yours i i { 
; /\ , j i 7 neil 
avia Wilson 

i } 

Nad 


\ 
ana 


DEFAUS_00108906 


erenaenetcenr anna: 


CONFIDENTIAL 
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23 October 2013 


The Directors 
Interconnected Research Pty itd 
43 St Johns Avenue 
Gordon NSW 2072 


Dear Craig 


Fam no longer able to continue as a director of the company and hereby submit my resignation to 
take effect romediately. 2 


ia 


Yours sincer ly / 





sii 
al ae 





onnenentoammcoreseni etn DEFAUS_00108907 
CONFIDENTIAL 


. / / g 


23 October 2013 


The Directors 
integyrz Pty itd 

43 St Johns Avenue 
Gordon NSW 2072 


Dear Craig and Ramona 


iam no longer abie to continue @s 4 director of the company and hereby submit my resignation to 


take effect immediately. 


Yours sincerply 


0) 

/ 
per ih A / 
¥ 4 J 





/ if, 
jamie & Wilson 
i 


CONFIDENTIAL 


DEFAUS_00108908 


+ 
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From: Craig S Wright 

Sent: Friday, September 20, 2013 6:12 AM 
To: Jamie Wilson 

Subject: RE: Urgent ASIC 


Xero does not aliow this right now, but we have the following as the capitalisation. 
* Bitcoin 
eintangables 
¢ R&D 
Details are following and | am adding BTC as inventory for now. 
From: Jamie Wilson 
Sent: Friday, 20 September 2013 3:39 PM 
To: Craig S Wright 
Subject: Urgent ASIC 
Hi Craig, 
After discussion with Roger Menu yesterday he was excited with the result of the ASIC search of capitalisation of $29,999,800.00 within HotwirePE. My last 
search on ASIC was 100 shares issued to you and unaware of any additional shares being issued. This has prompted me today to do company search on the 
following companies with the following shares issued and paid: 
© Denariuz Pty Ltd - 8,500,000 with amount paid $8,500,000; 
¢ Coin-Exch Pty Ltd — 40,000,000 with amount paid $40,000,000; and 
«Hotwire Preemptive Intelligence Pty Ltd - 10,000,000 with amount paid $29,999,800. 
Craig | see you have issued shares to me personally and not unaware this was done already. This needs to be fully accounted for as we are dealing with a 
publicly listed company. Would you please send through urgently evidence that backs up the dollars to the issued capital for the above companies. Rubik 
intends to make announcement early next week therefor this must be sorted out over the weekend. 
Regards, 





Jamie Wilson 

Chief Financial Officer 

Hotwire Preemptive intelligence {Group) 
Mobile: +61 eG 176 816 





Hotwire PE 


AIS — otwining the World 


CONFIDENTIAL DEF_00045496 
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CONTRACT FOR THE SALE OF SHARES OF 
A COMPANY OWNING BUSINESS 


PARTIES 


er eee 


Dave Kleiman for W & K Info Defense LLC 
(Vendor) 





| 
i 
AND 


Craig Wright R&D 
ABN 97 481 146 384 
(Purchaser) 


AND 


W2&K Info Defense LLC 
(Company) 


Ref: CEWKO3 
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THIS AGREEMENT dated 02 day of April 2013 


BETWEEN 
Dave Kleiman of W&K Info Defense LLC (Florida) 
(Vendor) 
And 
Craig Wright of Craig Wright R&D 
ABN 97 481 146 384 
(Purchaser) 
And 
W&K Info Defense LLC 
(Company) 
RECITALS 


A. The vendor is the owner of all issued shares in the company being ordinary 
class shares. Ownership is 50% in the vendor's name and 50% in trust held for 
the purchaser. 

B. The company is the owner of and conducts the business known as Bitcoin 
mining and Software development / Research. 

C. The vendor has agreed to sell and the purchaser has agreed to purchase the 
vendor’s shares for the price and upon the terms set out hereunder. 

D. As the purchaser will succeed to the business of the company on completion of 
the acquisition of these shares, the parties agree that they will incorporate into 
this agreement those agreements contained in the attached contract for the 
sale of a business to the intent that they shail in relation to the sale of the 
shares have the rights and obligations contained in such contract as part of this 
agreement. 

E. The company has consented to and agreed to be bound by the terms of this 
agreement. 

F. The company includes all software, research material and other aspects of the 
business. 

G. The parties wish to commit the terms of their agreement to writing in the 


manner hereinafter set out. 
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OPERATIVE PART 
1. Interpretation 


This agreement is governed by the laws of the state of NSW, and the parties, 
submit to the non-exclusive jurisdiction of the courts of that state/country. 


In the interpretation of this agreement: 

(a) References to legislation or provisions of legislation include changes or re- 
enactments of the legislation and statutory instruments and regulations 
issued under, the legislation; 

(b) Words denoting the singular include the plural and vice versa; words 
denoting individuals or persons include bodies corporate and vice versa; 
references to documents or agreements also mean those documents or 
agreement as changed, novated or replaced, and words denoting one 
gender include all genders; 

(c) Grammatical forms of defined words or phrases have corresponding 
meanings; 

(d) Parties must perform their obligations on the dates and times fixed by 
reference to the capital city of the state of Sydney; 

(e) Reference to an amount of money is a reference to the amount in the 
lawful currency of the Commonwealth of Australia: 

(f) If the day on or by which anything is to be done is a Saturday, a Sunday or 
a public holiday in the place in which it is to be done, then it must be done 
on the next business day; 

(g) References to a party are intended to bind their executors, administrators 
and permitted transferees; and 

(h) Obligations under this agreement affecting more than one party bind them 


jointly and each of them severally. 


2. The vendor hereby agrees to sell and the purchaser hereby agrees to purchase 
ordinary class shares in the company for the purchase price as noted below: 

(a) Two (2) loans issued under deed “CEWKO1”" are agreed to be repaid in 

full for the consideration of 300,000 Bitcoin agreed in the contract. The 

repayments as a one off of both loans for $20,000,000 with a total value of 
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$40,000,000 are deemed paid in full for the above value. This is noted as 
consideration from the purchaser and is issued in forbearance of the 
requirements of the contract signed 22 April 2011 between the 
Vendor/Company and the purchaser (designated CEWK0’1). 

(b) The vendor agrees that the paper wallet with address 
“1933phfhK3ZgF QNLGSDXvqCn32k2buXY8a" held in escrow will be 
released to the purchaser. 

(c) Due to the unexpected rise in the value of Bitcoin, it is agreed that two 
transfers (in Bitcoin) of BTC 125,000 and BTC 125,500 when taken in 
conjunction with the supply of the software, will suffice to fulfil the contract. 


3. Hence, the vendor will: 
(a) Pay (transfer to) the purchaser 250,500 BTC on 30 April 2013, 
(b) Accept transfer of the escrowed Bitcoin paper wallet to the purchaser, 
(c) Transfer the ASC hardware to the purchaser, 
(d) Release the source code to the purchaser, 
(e) Transfer the Vistomail email account. 
(f) Transfer all research materials from the four (4) DHS BAA research 
projects to the purchaser with all notes, data and results, and 
(g) Transfer any shares in the company to the purchaser by 30 April 2013. 


4. The Purchaser will: 

(a) Accept the new terms in full satisfaction of the contract with Reference 
CEWK01 made between the vendor/company and the purchaser on 22 
April 2013. 

(b) Accept the vendor's 323,000 remaining “mined” Bitcoin as a 49.5% stake 
in a new venture to be formed in Australia (to be called Coin-Exch Pty Ltd) 
between the vendor and the purchaser for the exploitation of the joint and 
to be pooled Bitcoin 

(c) Accept the transfer of the 323,000 Bitcoin (to be made on the 30" April 
2013) as capital and note that shares in the new enterprise will be issued 


at this point. 
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(d) Provide $30,000,000 in capital into Coin-Exch Pty Ltd (to be formed) and 
the software developed in the prior venture. 


5. Settlement shail be effected on 30 April 2013. 


6. So far as they are relevant the agreements contained in the incorporated 
contract for the sale of a business shall be agreements between the parties 
herein. 


7. In the event of either party failing to complete this agreement on the settlement 
date then the other shall be entitled at any time thereafter to serve a notice to 
complete requiring the other to complete within 14 days from the date of service 
of the notice, which time period is considered reasonable by both parties. For 
the purpose of this contract, such notice to complete shall be deemed both at 
law and in equity sufficient to make time of the essence of this contract. 


8. On the settlement date the vendors shall: 

(a) Deliver up to the purchaser possession of the business conducted by the 
company and in all respects shall have complied with the terms of the 
business sale contract incorporated herein; 

(b) Deliver up to the purchaser duly executed instruments of transfer of their 
shares; 

(c) Cause a meeting of the directors of the company to be held at which the 
directors shall approve and consent to the sale and transfer by the 
vendors to the purchaser of the vendors’ shares. 

(d) Send all software developed under the various DHS BAA filings to the 
purchaser (incl. source code and documentation). 

(e) Provide the location and access rights to the ASC mining hardware hosted 
at a site Known to Mr Kleiman will be returned with this transfer. This has a 
nominal value of $8,828,571.29 before depreciation. This is a 

(f) Solutions to the Agent and Merkle Tree problems developed by Professor 
David Reese. 

(g) Bitcoin agent software and suit of C/C++/C# and Python Blockchain 


software source codes. 
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(h) Exchange Bitcoin holdings as noted in the contract. 


9. The company hereby agrees to take all steps and carry out all acts to procure 
the registration on the settlement date of the purchaser as the registered holder 
of tile to the vendors’ shares. 


10. The purchaser will make all reasonable endeavours to have the new venture 
(Coin-Exch Pty Ltd) registered for GST and under the Australian Corporations 
act provisions before settlement on the 30" April 2013. 


11. The parties hereto agree to execute and perform all such acts, deeds, 
documents and things whatsoever as may be necessary and desirable to better 


carry into effect the provisions of this agreement. 


12. Vendor’s warranties 
(a) Vendor's authority to sell 

(i) |The vendors are the registered and beneficial owners of their shares 
in the company. 

(ii) |The vendors have full power and authority to sell and transfer to the 
purchaser good legal and equitable title to the shares without the 
consent or authorisation of any person except only consents required 
by the company. 

(b) The company’s financial statements 
Other than matters disclosed to the purchaser in writing the books and 
accounts of the company truly and fairly reflect the company’s affairs. 

(c) Books and records 

The company's books, records and registers are in the possession of the 

company, and accurately record the details of all of the company's 

transactions, finances, assets and liabilities. 
(d) Taxation 

(i) | Other than disclosed to the purchaser in writing the company has 
lodged or filed all tax and duty returns for all taxes including GST, 
income tax, sales tax, fringe benefits tax, payroll tax, group tax and 
WorkCare levies. 
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(ii) No claim has or will be made against the company for payment by 
the company pursuant to the provisions of the Income Tax 
Assessment Act 1936 of any tax which is not shown or included as a 
liability or provision in the balance sheet contained in the accounts. 

(iii) Neither the commissioner nor any federal, state or municipal body 
has any dispute with the company concerning the company's affair. 

(e) Compliance with applicable laws 

(i) Neither the vendor nor the company has breached, or caused a 
breach of the company's memorandum or articles of association; any 
contract, agreement or instrument which binds the company; or any 
judgment, order, injunction or decree of any court, commission or 
administrative body relating to the company or to the shares. 

(ii) Neither the company nor any of its officers, agents or employees 
(while performing their duties for the company) has breached the 
law. The company has not been notified that it has, or may have, 
breached the law regulating its affairs or the conduct of its business. 

(f) Litigation and indebtedness 

Other than as disclosed to the purchaser in writing: 

(i) The company is not a party to, or threatened with, any claim, 
litigation, prosecution or arbitration in any court, tribunal or otherwise; 

(ii) There are no unsatisfied judgments or arbitral awards against the 
company; 

(iii) The company is not being investigated for any breach of the law. 
Neither the company nor any of its directors is aware of any breach 
of the law or of any circumstances, which would give rise to a breach 
of the law other than as disclosed to the purchaser in writing; 

(iv) The company has met all deadlines for repayment of its debts; 

(v) No petitions, notices or proceedings have come to the company's 
notice, which could result in it being wound up. No orders or 
resolutions have been made or passed to place the company in 


liquidation or provisional liquidation. 
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(g) Accuracy of disclosed information 

(i) The vendor has disclosed to the purchaser all information, which 
would be material for a purchaser in forming a decision whether or 
not to purchase the shares. 

(ii) If either the vendor or the company becomes aware of anything 
which may constitute a breach of, or be inconsistent with any 
representation, warranty or undertaking in this agreement, they will 
notify the purchaser of its particulars promptly in writing. 

(h) Warranties and indemnities 

(i) It is a condition of this agreement that each warranty is true and 
correct in every respect and shall be construed separately. 

(ii) | The vendor acknowledges that the warranties have been given with 
the intention and for the purpose of inducing the purchaser to enter 
into this agreement. 

(iii) The purchaser has entered into this agreement and agreed to the 
purchase price payable for the shares on the basis of and in full 
reliance upon the warranties. 

(iv) Prior to the settlement date the vendor will take all such steps and 
provide all such information and documents with regard to the 
company as the purchaser may reasonably require and will give the 
purchaser and its professional advisers full and free access to the 
records and accounts of the company (whether financial or 
otherwise) to enable them to fully investigate the accuracy of the 


warranties. 


13. Notices 
A communication required by this agreement, by a party to another, must be in 
writing and may be given to them by being: 
(a) Delivered personally; or 
(b) Posted to their address specified in this agreement, or as later notified by 
them, in which case it will be treated as having been received on the 


second business day after posting; or 
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14. 


15. 


16. 


17. 


et O01 


(c) Faxed to the facsimile number of the party with acknowledgment of receipt 
received electronically by the sender, when it will be treated as received 
on the day of sending; or 

(d) Sent by email to their email address, when it will be treated as received on 
that day. 


Waiver or variation 

(a) A party's failure or delay to exercise a power or right does not operate as 
a waiver of that power or right. 

(b) The exercise of a power or right does not preclude: 
(i) ‘Its future exercise; or 
(ii) |The exercise of any other power or right. 

(c) The variation or waiver of a provision of this agreement or a party's 
consent to a departure from a provision by another party will be ineffective 
unless in writing executed by the parties. 


Counterparts 

This agreement may be executed in any number of counterparts each of which 
will be an original but such counterparts together will constitute one and the 
same instrument and the date of the agreement will be the date on which it is 
executed by the last party. 


Further assurance 
Each party will from time to time do all things (including executing all 


documents) necessary or desirable to give full effect to this agreement. 


Costs 
Each party will pay their own costs in relation to this agreement. 
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SIGNED AS AN AGREEMENT 


Executed by 
W & K Info Defense LLC ) 


Lie K hai tutoos, 


Dave Kleiman 
DIRECTOR 


Executed by 
Craig Wright R&D (A.B.N, 97 481 pre as 


‘Lele ee 


Craig S Wright 
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From: Craig S Wright 

Sent: Wednesday, June 26, 2013 6:06 AM 
To: Jamie Wilson; Ramona Watts 

Subject: Some history 

Attachments: BAA 11-02-TTA 14-0025-WP Software Derivative Markets Cover Sheet A Page.pdf; Proposal White Paper].pdf; Proposal White Paper2. pdf, 
BAA 11-02-TTA 01-0127-WP Software Assurance Cover Sheet A Page.pdf; BAA 11-02-TTA 05-0155-WP Scada Cover Sheet A Page.pdf, BAA 1 1-02- 
TTA 09-0049- WP Risk Quantification Cover Sheet A Page.pdf; Proposal White Paper3.pdf, Proposal White Paper4.pdf 





This is where this started. 


All has started to move much faster now. Dave passed a couple months ago, so | am no longer waiting for him to get better. 
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From: Craig S Wright 

Sent: Tuesday, July 2, 2013 12:35 AM 

To: ‘Ramona Watts’ 

CC: jamie. wilson@hotwirepe.com 

Subject: Next 

Hello Love, 

Well, | said | would be doing something with that money... 

https://venture-lab.org/venture/pitch_decks/102 

Jamie is on board. | will likely seek 20 or so projects such as this one. That will give us a spread against risk. 
My time input is limited to governance and review. | will be supplying money and people. The lead is a professor in Stanford Uni | know. 
Have a read, | am sure you will be interested in what it is. Jamie and | are. 


Yours, 


Craig 
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From: Craig S Wright 

Sent: Wednesday, October 9, 2013 1:42 PM 
To: Hardy. Michael 

CC: ‘Jamie Wilson’; Ramona Watts 

Subject: Discussion 


Hello Michael, 
As we have noted, all discussions are to remain confidential. 


There are a couple recent transactions. For the most part, we will be trading these as sparingly as possible. The main addresses we control as a group include the 
following ones listed below. 

We can setup a mapping and plan to in our system. For Australian XBT holders and merchants, we will be recording and reporting TFN transactions and recording 
these. We will have these audited. 

For privacy, we are developing a means to hide transactions whist still reporting tax obligations. We would like to involve the ATO technical teams in this 
process. 

The addresses are in my control now as a matter of fate and other circumstances. David Reese and David Kleiman have both been essential parts of this project. 
Both of these gentlemen who | had the good fortune to call friends passed away this year. David Reese was a friend of my grandfather before he died of 
Parkinson’s. David Kleiman was my best friend. 

The following addresses are not planned to be used. The idea is to have a future reserve function and to be able to backup and bond transactions. 

| do have doubts about trusting the ATO with this information. | hope that you understand this. | am not admitting anything to do with the creation of this 
currency, just that we (and there are remaining others to the we outside of Australia) strongly desire to make a robust online international economy using XBT. 
At present, we are in the process of finalizing an agreement with a listed Australian company for the development of a core banking solution based on XBT that 
we plan to deliver globally from Australia. We are seeking to become an ADI and obtain an AFSL. 

| hope that you understand the trust we are placing in the ATO and that we do want to roll out a global solution from Australia that 

| hope this trust is not misplaced and that this information remains confidential. 

The addresses are: 


| Wallet (Address Balance XBT SAU Market 

1FJuzzQFVMbiMGw6JtcXefdD64amy7mSCF 6,999.00 $1,012,755.30 $144.70 
18)PragfuDVHWWGS8ABQ15cghJFetnXUjBD 24,404.51 $3,531,331.96 $144.70 
IMyGwFAJjVtB5rGla32M6Yh46cGirUtalK 30,000.04 $4,341,005.95 $144.70 
12ib7dApVFvg82TXKycWBNpNSkFYyiAN 1dr 31,000.04 $4,485,706.09 $144.70 
16Ls6azc76ixc9Ny7ABSZPPq6oiELSXwXxy 40,000.04 $5,788,005.95 $144.70 
IcXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV 40,000.04 $5,788,006.10 $144.70 
16cou7Ht6WjTzuFyDBnhtShmvxytg6XxdVT 53,000.04 $7,669,106.24 $144.70 
1FeexV6bAHb8ybZjqQMjJrcCrHGW9sb6uF 79,957.04 $11,569,784.36 $144.70 

111,114.60 $16,078,282.66 $144.70 









1933phfhK3ZgFQNLGSDXvqCn32k2buxY8a 


416,475.36 
Misc 3,518.63 
COIN 
ALXe28hWx1t8npSsCAb2 EaNFqPwqJCuERD 34,512.83 $4,994,006.36 $144.70 
Other 
12HddUDLhRP2F8JjpKYeKaDxxtSwUvx5nq 40,000.04 $5,788,005.95 $144.70 


Other wallet addresses are: 
TALXLVNj7yKRU2Yki3K3yQGB5TBPof7jyo 
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Regards, 


br. Craig s Wright GSE LLM 

Chiet Executive Officer 

Hotwire Preemptive Intelligence (Group) 
Mobile: ' + 61.417) 883, 914 
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From: Craig S Wright [craig ] 

Sent: 10/2/2013 3:12:39 PM 

To: jenna.spears@ato.gov.au 

cc: Jamie Wilson’ [jamie.wilson@hotwirepe.com]; 'Hardy, Michael’ [Michae!.Hardy@ato.gov.au] 
Subject: Discussion 

Hello Jenna, 


As discussed just now on the phone, | would like to have a meeting with Mr Jordan. | have had discussions with Michael 
Hardy and others, and now we need to move this discussion upstairs. 


The group | head has a holding of over $SAu 100,000,000 in XBT (Bitcoin). 
We are in the process of becoming a fully regulated exchange and bank under APRA provisions. 


What most people do not realise is what can be done in the Bitcoin scripting language. Basically, we can have a 
compliant series of transactions that are managed and mapped to company details such as a TFN for a business. 


| would like to discuss this with Mr Jordan and also ensure that we have a regime that suits the needs of the ATO when 
we go live later in the financial year. We are also offering to teach your people how BTC works and to help you regulated 
this as a tool in an electronic economy. 


Regards, 


Dr. Craig S Wright GSE LLM 
Chief Executive Officer 
Hotwire Preemptive Intelligence (Group) 
Mobile: + 61.417.683.914 
craig.wright@hotwirepe.com 


Hotwire PE 


BO —Hotwiring the World 
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From: Craig S Wright 

Sent: Saturday, October 12, 2013 4:47 AM 

To: ‘Italia, Mark’ 

CC: Jamie Wilson; 'Hardy. Michael’; Ramona Watts 

Subject: RE: Notification of audit ABN 48 164 068 348 

Attachments: Letter to ATO 11-10-13.pdf, 20131011145721820.pdf; abg 13 05_12 financial 31 mar_2013.pdf: 
abg 13.05 12 financial 31_mar_2013.pdf 





Helio Mark, 

More information wil! follow as promised later next week. 

Attached you wil! see a letter in support from one of our supotiers, Rubix. The agreement to use this is from the MD of Rubix under the condition “As agreed you 
may use this as a confidential letter to the ATO on the basis it remains a non-public document.” We are not ready to go to market nor to issue a press release on 
the products as yet, but wil! be in the next cougie months. 

i have also attached a Stat Dec from our solicitors validating the control of a number of Bitcoin based addresses. You can validate the amounts held in these 
publicaily. For instance at: 

nttp://blockexplorer.com/address/1933phfAk3ZeFQNIL.GSOXvgCn32k2bux¥8a 

th a hoiding in excess of 111,114 BIC the above address we nave confirmed controi of is valued on market at SAU 16,444,960.83 (See 

1D). | have signed an agreement to escrow this Bitcoin deposit in support of 
echnology Limited and Daliah. 








The Stat Dec can be confirmed. The detalls of our solicitor are: 
Stephen D'Emilio 
Director 


Commercial Litigation 

FD Commercial Lawyers 

Level 3, 2 Bligh Street, Sydney NSW 2000 Direct dial: +61 2 9221 7289| Fax: +61 29221 8601 

Mobile: 0412 548 791 

| will foliow this with transaction details early next week showing transfers of Bitcoin in August. Again, this information is pseudo-anonymous. That is, the 
information is actually public but is hidden as it is tied to a hash vaiue that is the address. This both acts as proof of a transaction as weil as a general iedger in 
effect. Knowing the addresses, the ATO can track and monitor ail transactions. These are for amounts in excess of $Smillion Au for software and hardware 
purchases. These are large and unusuai amounts, but as you can see for the supporting letter from Rubik, we are doing something new in the industry in 
building a Core Banking platform. 

i will for the contracts from Dallah Group, who are providing platforms for Core islamic Banking (so we can enter the Indian and Middle Eastern Markets} early 
next week. To this, | will attach a letter of support from H.E Sheikh Saieh Abdullah Kamei, Chairman And Founder Dallah Group of Companies. ! have attached 
the interim financiais for this group who are supporting us and helping supply microfinance software. 

Modulus are developing software for us to enabie FOR-EX {foreign exchange] and other forms of trading (such as a stock exchange). 

AS you can see from the link befow, core danking is not a cheap exercise: 








group's ‘or year include: million for ‘tliat: AU$236 million for data processing, AU$100 million for desktops, 
AU$202 million for communications, AU$245 million for software amortisation, and AU$77 million for IT equipment depreciation.” 
Jamie or myself wil! send you details of what this is providing during the week as week. 
Once we have this to you, please feel free to ask us for anything more. We are more than happy to supply this information to you. We go “live” next year. Right 
now we are remaining somewhat secret, but as | hope you can see from the supporting letters and other information that we are sending you, this is a serious 
Susiness concern. 
The contract with Rubik and others is for a system that will support 1,000,000 clients in June 30 next year. 





Regards, 


Dr. Craig S Wright GSE LLM 

Chief Executive Officer 

Hotwire Preemptive Intelligence (Group) 
Mobile: + 61.417.683.914 
craig.wright@hotwirepe.com 


j Hotwire lee 
G2 Hotwiring the 


From: Italia, Mark [mailto:Mark.|Italia@ato.gov.au] 
Sent: Wednesday, 9 October 2013 2:14 PM 

To: Craig S Wright 

Subject: Notification of audit ABN 48 164 068 348 








Hi Craig, 

Please refer to our notification to retain refund letter. 
<<Notify - refund retained.pdf>> 

Regards 

Mark Italia 

Indirect Tax | Refund Integrity 


Australian Taxation Office 
Phone 03 9275 4243 
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ATG Centenary | Working for all Australians 


EAA AEE EEA EEDA LA ALALAA SAAS HA SAADADAAAAS AEA ERAAA RARER RARER RE 


IMPORTANT 

The information transmitted is for the use of the intended 
recipient only and may contain confidential and/or legally 
privileged material. Any review, re- transmission, disclosure, 
dissemination or other use of, or taking of any action in 
reliance upon, this information by persons or entities other 
than the intended recipient is prohibited and may result in 
severe penalties. If you have received this e-mail in error 
please notify the Privacy Hotline of the Australian Taxation 
Office, telephone 13 2869 and delete all copies of this 


transmission together with any attachments. 
SUC OR IORI OR RR tk a i doi toi tok dit ok koto iiotottotom toi tok bot tok tet bob oe 
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From: Craig S Wright 

Sent: Sunday, October 6, 2013 12:57 AM 

To: Italia, Mark <Mark.Italia@ato.gov.au> 

CC: Ramona Watts; Jamie Wilson; Hardy, Michael <Michael.Hardy@ato.gov.au> 

Subject: Email 6: RE: Notification of audit ABN 48 164 068 348 

Attachments: BITCOIN_18.07.2013.png, Hotwire Transaction INV-0001 (1).png: BITCOIN_GICSR.png; Existing value.png 





SysUserProp: 88334F2CCAOD8ES5 1C8530404366F9B82 


Helio Mark, 

i have CC’d Michaei. 

Please understand that the funding and other areas is something | have deen discussing with the ATO and it is an area that is to remain of utmost secrecy. The 
funding is in cash and Bitcoin. We have already been in discussions and have filed private rulings to have XBT (Bitcoin) recognised. We are and have offered 
waliet details to peopie within the ATO such that they can track the transactions we have in XBT. 

Our funding comes as we are the group that controls 5% of the giobal Bitcain market. 

We are dealing with listed Austraiian and International companies. | will send details of some of these dealings next. We intend to have a licensed Australian 
Bank and other aspects by the end of the year. 

This information is beyond secret. We are sharing it to the ATO, but it is NOT released to market as yet. 


There will be a 7** email. 


Regards, 

Craig 

From: Italia, Mark [mailto:Mark.italia@ato.gov.au] 
Sent: Friday, 4 October 2013 1:18 PM 

To: Craig S Wright 

Subject: Notification of audit ABN 48 164 068 348 





Hi Craig, 
Further to our discussion, attached is a letter outlining the information we require as part of the audit. 


<<Confirm - audit - post issue SR.pdf>> 
<<Acrobat Document.pdf>> 


Regards 


Mark Italia 

Indirect Tax | Refund Integrity 
Australian Taxation Office 
Phone 03 9275 4243 


ATO Centenary | Working for all Australians 
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IMPORTANT 

The information transmitted is for the use of the intended 
recipient only and may contain confidential and/or legally 
privileged material. Any review, re-transmission, disclosure, 
dissemination or other use of, or taking of any action in 
reliance upon, this information by persons or entities other 
than the intended recipient is prohibited and may result in 
severe penalties. If you have received this e-mail in error 
please notify the Privacy Hotline of the Australian Taxation 
Office, telephone 13 2869 and delete all copies of this 


transmission together with any attachments. 
BERET EEE EE EEE EERE EERE EEE EE EEE EK EEE EEE EEE ES EEE EEE ESET EET EEE EE EE 
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From: Craig S Wright [craig.wright@hotwirepe.com] 

Sent: 9/23/2013 12:56:01 PM 

To: Roger Manu [roger.manu@rubik.com.au]; Jamie Wilson [jamie.wilson@hotwirepe.com] 
Subject: RE: Advice 

XBT. 


Bitcoin is a currency. 

There are 11 million Bitcoin. 

Look at the exchange rate in Xe.com 

We control what is all up a little over 1 million Bitcoin. 
| will leave you with the math 


Craig 


From: Roger Manu [mailto:roger.manu@rubik.com.au] 
Sent: Monday, 23 September 2013 12:48 PM 

To: Craig S Wright; Jamie Wilson 

Subject: Advice 


Hi Craig/Jamie 
Trust all is well. NZ went well and I will discuss more with you later in the week. 


In doing our due diligence we discovered technical articles suggesting there are only 12m bit coins out there, 
and it maxes out at 21m. So Rubik were wondering how the paid up share capital is 30m, all very confusing. 
Can you please assist 


Thanks and Regards 
Roger 


From: Roger Manu <roger.manu@rubik.com.au> 
Date: Monday, 23 September 2013 12:30 PM 
To: ken <ken.carr@rubik.com.au> 

Subject: Re: Advice 


But see to have an oversight role 
Roger Manu 


RUBIK Financial 
+61414918714 


Roger.manu@rubik.com.au 
On 23/09/2013, at 2:18 PM, "Ken Carr" <ken.carr@rubik.com.au> wrote: 


Nothing exciting then 
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From: Diane Pearce - UR <dianep@nsw.uca.org.au> 
Date: Monday, 23 September 2013 12:10 PM 

To: ken <ken.carr@rubik.com.au> 

Subject: RE: Advice 


The Members of the Trust Association must be members of the Uniting Church. At the 
AGM they receive the accounts, appoint directors and auditors, etc. They are not 
normaily involved in day to day operations. 


Regards, 
Diane 


Diane Pearce | Board Secretary | Uniting Resources 

The Uniting Church in Australia, Synod of NSW and the ACT 
Level 9, 222 Pitt Street, Sydney NSW 2000 

t 02 8267 4310 | 02 9264 4487 


edianep@nsw.uca.org.au 
www.unitingresources.org.au 


This email (and attachments) is confidential, and/or privileged and is intended for the use of the addressee 
only. If you are not the intended recipient of this email you must not copy, distribute, take any action in 
reliance on it or disclose it to anyone. Any confidentiality or privilege is not waived or lost by reason of 
raistaken delivery to you. If you have received this email in error please destroy the original and notify the 
sender. 


From: Ken Carr [mailto:ken.carr@rubik.com.au) : 
Sent: Friday, 20 September 2013 5:09 PM 


To: Diane Pearce - UR 
Subject: Re: Advice 


Thanks very much Diane, just not sure what the members do, are they like some governance 
group 


From: Diane Pearce - UR <dianep@nsw.uca.org.au> 

Date: Friday, 20 September 2013 4:58 PM 

To: Karin Hawkins <karin@karinhawkins.com>, ken <ken.carr@rubik.com.au> 
Subject: RE: Advice 


Dear Mr Carr, 

Craig Wright is a Member of The Uniting Church (NSW) Trust Association Limited 
(‘UCTAL’), which can have a maximum of 25 Members. UFS is the trading name for the 
company UCTAL. 

Craig was appointed a Member under the watch of our previous Chairperson who liked 
to use the word ‘Trustee’ when referring to Members, and so some of our newer 
Members (like Craig) refer to themselves as a ‘Trustee’. They are, in fact, Members. 


| hope this heips. 


Regards, 
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Diane 


Diane Pearce | Board Secretary | Uniting Resources 

The Uniting Church in Australia, Synod of NSW and the ACT 
Level 9, 222 Pitt Street, Sydney NSW 2000 

t 02 8267 4310 | 02 9264 4487 


edianep@nsw.uca.org.au 


This email (and attachments) is confidential, and/or privileged and is intended for the use of the addressee 
only. If you are not the intended recipient of this email you must not copy, distribute, take any action in 
reliance on it or disclose it to anyone. Any confidentiality or privilege is not waived or lost by reason of 
mistaken delivery to you. If you have received this email in error please destroy the original and notify the 
sender. 


From: Karin Hawkins [mailto:karin@karinhawkins.com] 
Sent: Friday, 20 September 2013 4:29 PM 

To: Ken Carr 

Cc: Diane Pearce - UR 

Subject: Re: Advice 


Hi Ken, 


I am not familiar with all of the Trustees but Diane Pearce who is the Board 
Secretary will know. Diane, are you able to confirm whether Craig Steven 
Wright is a Trustee? 


Cheers 
Karin 


Karin Hawkins 

NED & Chair, Strategic Operations Committee 
Uniting Financial Services 

+61 412 217 447 


On 20/09/2013, at 4:13 PM, Ken Carr <ken.carr@rubik.com.au> wrote: 


Hello Karin, 

This is a request on a completely different issue. We may be doing business with someone 
who presents as a current Trustee of The Uniting Church (NSW) Trust Association limited. 
Although | cannot find him on any site. His name is Craig Steven Wright. Do you know him by 
any chance 


Regards 


Ken Carr 


CONFIDENTIAL DEFAUS_00113045 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18 





214 
From: Craig Wright 
Sent: Thursday, July 18, 2013 5:06 AM 
To: fhalyce.dempster@ato.gov.au 
CC: jamie.wilson@hotwirepe.com 
Subject: Evidence. 
Hello, 
Bitcoin Value (Holding) Mt Gox Value Mt Gox Value 
18-Jul-13 1/07/2013 
Coin-Exch 438,857 $47,649,574.61 $50,907,412 
Exchange Value $108.58 116 $116.00 
CSW (Personal) 57,000 $6,188,862.78 $6,612,000 
Total $53,838,437.39 


The transfers are to be based on the values in the private ruling. 
My wallet is listed below. 


<<,_>> 


Regards, 


Dr. Craig Wright LLM GSE GSM GSC MMIT MNSA MinfoSec CISSP/ISSMP CISM CISA 


RCJBR.org 


Tel: + 612 8003 7553 | Mobile: + 61 417 683 914 


http://www. rcibr.org 


<<>> <<>> <<>> 
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From: Craig S Wright 

Sent: Sunday, October 6, 2013 1:07 AM 

To: Italia, Mark <Mark.Italia@ato.gov.au> 

CC: Jamie Wilson, Ramona Watts; Hardy, Michael <Michael.] ardy@ato.gov.au> 
Subject: Email 7: RE: Notification of audit ABN 48 164 068 348 

Attachments: SaaS Master Agreement Hotwire Final.pdf 


SysUserProp: 88334F2CCAOD8E51C8530404366F9B82 


Helio Mark, 

This is the 7%" email. 

Jamie can get you the original signed copy of the Rubik agreement if you require it. It applied to the following: 
Attp://www.rubik.com.au/Products/Temenos-124.asox 

This shouid provide you with an idea of what we are and what we are doing. We have a capitalisation in the group of $230 million and will be filing as a Large 
Entity and ADI in June 2014. We centroi $165miliion in XBT (Bitcoin). We are becoming a regulated and licensed bank. 

As you will have noted, ali other XBT companies giobaily are not seeking regulation. The business wiil de tive soon and we have a job and a haif ensuring we are 
ready for the media circus that will ensure. | hope you understand the need for secrecy. 

{ will cail tomorrow {Monday} to ensure that you have al! you require. 

We can get you mere oroject charters, Ausindustry Advance findings, etc. Just let me know, we have voluminous quantities of documents here. 

You should have received 7 emaiis in total. 
Regards, 

Craig 

From: Italia, Mark [mailto:Mark.|talia@ato.gov.au]} 
Sent: Friday, 4 October 2013 1:18 PM 

To: Craig S Wright 

Subject: Notification of audit ABN 48 164 068 348 





Hi Craig, 
Further to our discussion, attached is a letter outlining the information we require as part of the audit. 


<<Confirm - audit - post issue SR.pdf>> 
<<Acrobat Document.pdf>> 


Regards 


Mark Italia 

Indirect Tax | Refund Integrity 
Australian Taxation Office 
Phone 03 9275 4243 


ATO Centenary | Working for all Australians 


RO IO Oe OE EE EEE EERE EE ERASE SEERA EEE EEE 


IMPORTANT 

The information transmitted is for the use of the intended 
recipient only and may contain confidential and/or legally 
privileged material. Any review, re-transmission, disclosure, 
dissemination or other use of, or taking of any action in 
reliance upon, this information by persons or entities other 
than the intended recipient is prohibited and may result in 
severe penalties. If you have received this e-mail in error 
please notify the Privacy Hotline of the Australian Taxation 
Office, telephone 13 2869 and delete all copies of this 


transmission together with any attachments. 
FEKETE EEE EEE EEE EE EE EEE EEE EE EEE EE EEE EEE EEE EEE EEE SE EEE 
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From: Steven Lipke 

Sent: Friday, September 27, 2013 1:52 AM 

To: Craig S Wnght; Robert Urquhart; Jamie Wilson; Ramona Watts; Allan Pedersen 
CC: Dez Blanchfield <dez@blanchfield.com.au> 

Subject: Re: ATO Ruling 


SysUserProp: 88334F2CCAOD8E5 1C8530404366F9B82 
But | thought we were a multi currency bitcoin foreign exchange. 
Sent from my HTC 


---- Reply message ----- 

From: “Craig S Wright" <craig.wright@hotwirepe.com> 

To: “Robert Urquhart" <robert.urquhart@hotwirepe.com>, "Jamie Wilson" <jamie.wilson@hotwirepe.com>, "Ramona Watts" 
<ramona.watts@hotwirepe.com>, "Allan Pedersen" <allan.pedersen@hotwirepe.com> 

Cc: "Steven Lipke" <steven.lipke@hotwirepe.com>, “Dez Blanchfield" <dez@blanchfield.com.au> 

Subject: ATO Ruling 

Date: Fri, Sep 27, 2013 11:16 AM 


Hello, 

| have been informed that the primary three ATO private rulings | have been seeking will be issued next week. 

A private ruling is anonymised and then it is published on the ATO website. The ATO will be swarmed with press after this and we expect the quanta of the 
ruling to be global news. A five million dollar Bitcoin fund was world news and TV globally, we make this look like a mum and pop operation from the Winkly 
bros. 

That stated, we want this to be global news without our name being noted as yet. | do not know how many and how deep the journalists will be coming, but I 
know | have had Forbes and the WS) already digging. Right now, we are sitting on one of the biggest stories globally and we are not going to talk. 

Next year we do go live, but this has to be a planned and coordinated process. 

Regards, 


Dr. Craig S Wright GSE LLM 

Chief Executive Officer 

Hotwire Preemptive Intelligence (Group) 
Mobile: + 61.417.683.914 
craig.wright@hotwirepe.com 


* Hotwire Pe 


Hotwiring the 
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FILED 
4 NOV 2013 
Form 40 (version 2) 
UCPR 35.1 : 
e AFFIDAVIT OF Craig S Wright — 31° 13 
COURT DETAILS 
Court NSW Supreme Court 
Division General Division Common Law 
List General 
Registry Sydney 
Case number 2013 / 225983 & 
2013 / 245661 


Plaintiff 


Defendant 


FILING DETAILS 
Filed for 


Contact name and telephone 


Contact email 


Craig Steven Wright (ABN 97 481 146 384) 


W&K INFO DEFENSE RESEARCH LLC 


Craig S Wright 

Plaintiff 

Craig S Wright 

0417 683 914 

Craig S Wright (craigswright@acm.org) 


Co 


Ge 
Gh IL 
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AFFIDAVIT DETAILS 
Name Craig S Wright 


- Address 43 St Johns Ave Gordon 
Occupation Director / al 
Date ee es Nelo 20 
| affirm: 


1. | am the plaintiff. 
2. | believe that the information contained in this affidavit is true. 
3. The defendant is indebted to the plaintiff in respect of the balance of the cause of 


action 2013 / 225983 for which this action was commenced in the amount of 
$28,254,666.00 together with interest on the principal sum from the date of the cause 
of action to today’s date of $156,755.34 calculated as follows: 


Period Days & Rate p.a. Debt Amount Interest 
25 Jul 2013 — 23 Aug 93 days @ $28,254,666.00 $488,637.81 
2013 6.750% 
$5,254.17 per day until 
entry of judgment 
Total: $28, 743,303.81 
4. The defendant is indebted to the plaintiff in respect of the balance of the cause of 


action 2013 / 245661 for which this action was commenced in the amount of 
$28,254,666.00 together with interest on the principal sum from the date of the cause 


of action to today’s date of $156,755.34 calculated as follows: 


Period Days & Rate p.a. Debt Amount Interest 
25 Jul 2013 — 23 Aug 93 days @ $28,534,049.79 $490,746.57 
2013 6.750% 
$5,254.17 per day until 
entry of judgment 
Total: $29,024,796.36 
5. Since the commencement of this action no payments have de or credits 
accrued, 


6. The amount for filing, issuing and serving of the statement of claim nonin Cay 


not been paid is $0. 


LADILL 
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10. 


13. 


12. 


13. 


14. 


15. 


16. 


3 


The amount of solicitor’s costs calculated in accordance with the Local Courts (Civil 


Claims) Rules, which has not been paid is $0. 


The Statement of Claim was served on the defendant on 26 Jul 2013 by leaving it 
with the Defendant at the registered address for service of: 

David A Kleiman 

3119 Contego Lane 


Palm Beach Gardens 
FI 33410 USA 


The Statement of Claim was served on the defendant on 26 Jul 2013 by mailing it 
with the Defendant at the registered mailing address for service of: 

David A Kleiman 

4371 Northlake Blvd #314 


Palm Beach Gardens 
FI 33410 USA 


The defendant is a US LLC based in Florida USA. The US resident director was 
David A Kleiman. (Appendix A). 


The market rate (at this date) for the contract quantity of Bitcoin (Currency Code 
XBT) on Xe.com is $AUD 67,863,954.23 at a market rate of 1 XBT = 226.213 AUD 
1 AUD = 0.00442061 XBT. 


A contract was formed in April 2011 (Appendix B). 


300,000 Bitcoin and a series of software projects was to be paid in 2013 as 
consideration for this agreement. 


On 02 Feb 2013 the agreement to pay the 300,000 Bitcoin was noted in an email of 
Dave Kleiman to Craig Wright noting the verbal agreement to start a Bitcoin 
exchange based on the mined Bitcoin of Mr Kleiman and the returned amounts paid 


as consideration. 


The company, COIN-EXCH PTY. LTD. ACN 163 338 467 was started on 17" Apr 
2013 with an agreement for Mr Kleiman to transfer the remaining capital from the 
contract (B) in repayment as well as to inject a further amount of capital into the 
company on or before 30" April 2013 Appendix D). 


The contract was associated with an invoice to be paid for $34,862,323.00 U 
22Apr 2011. This was paid in full. 


deteLA 
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a AF ae Mr David A Kleiman died on 26" April 2013 (US time) (Appendix F). 


18. The transfers made into “W&K Info Defence LLC” (Appendix G) were completed in 
April 2013. These are pseudo anonymous but public. The details have been supplied 
in Appendix G. Details of these transactions have been given to the Australian Tax 


Office for tax purposes. 


19. The Bitcoin addresses used have been independently validated by NSW Solicitors 
under oath (Appendix H). 


20. | Work and research was conducted under the US Dept. of Homeland Security DHS 
BAA 


(a) Appendix | 
(b) Appendix J 
(c) Appendix K 


21. Mr Kleiman noted that screening software was developing in unwarranted manners 
and | noted that our software was looking at being better in an email (Appendix L). 


22. The coversheets for the S&T Directorate projects are included in Appendix M 


23. On 01* August 2013 a shareholders meeting was called for “W&K Info Defense LLC” 
to be held on the 16" August 2013. The meeting was emailed to the company 
address as well as send to the address of the shareholders and company. The 
shareholding of “W&K Info Defense LLC” was: 
ue Craig S Wright 50.0 % 

2. David A Kleiman 50.0 % 
24. The meeting from point 23 meeting was held on the 16" of August 2013. The 


following people were present: 


1; Jamie Wilson 
2, Craig S Wright 
25. “W&K Info Defense LLC” was an incorporated partnership. All shares are held jointly. 


The constitution states there is to be a resident US director. Shares were held jointly 


as per the US Companies Act, 1956. 


26. The following points were moved at the meeting: “ =f 
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27. 


28. 


29. 


30. 


5 


1. Jamie Wilson will act as director for the purposes of consenting to orders and 


the company to be wound down. 
2. The vote was Craig Wright — “Yes”. No other parties. 


3. It was agreed that following the motion to accept the debt owed by the 
company (W&K Info Defense LLC), it would be closed. 


Projects for the development of software started in 2009 under a company named 
“Integyrs Pty Ltd” (Appendix N). 


The development of the software was extended considerably in the period between 
2011 — 2013. 


| discovered that Mr Kleiman died before transferring the required funds on the 29" 
April 2013. The payment was planned for 30" April 2013. 


Mr Kleiman was not added as a shareholder and director of Coin-Exch Pty Ltd as 
was planned to occur on the 30" Apr 2013 as a consequence. 


Ved 
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AFFIRMED at —z 


Signature of deponent 


Name of witness NiceocrS CH, 
Address of witness Z2IV(03 S00 


Capacity of witness OES sree OF THE (WRG 


ce 
And as a witness, | certify th oe eee ts con ing the Person who ma i idavit (t ponent): 
\ Sav ce pews 3 ; 


| have confirmed the deponent's identity using the following identification document: 








Concord NSW 2137 
Telephone 0296034779 | 0412473695 


i 


[' "Identification documents" include current driver licence, proof of age card, Medicare card, credit card, 7 5 
Centrelink pension card, Veterans Affairs entitlement card, student identity card, citizenship certificate, birth 

certificate, passport or see Oaths Regulation 2011 or JP Ruling 003 - Confirming identity for NSW statuto! 

declarations and affidavits, footnote 3.] 
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H ‘ izati L.11000019904 
Electronic Articles of Organization FILED 8-00 AM 
u 


or 
Florida Limited Liability Company Sec, OF Stan aa 
cine 
: Article I 


The name of the Limited Liability Company is: 
W&K INFO DEFENSE RESEARCH LLC 


Article II 
The street address of the principal office of the Limited Liability Company is: 


3119 CONTEGO LANE , 
PALM BEACH GARDENS, FL. US 33418 


The mailing address of the Limited Liability Company is: 


4371 NORTHLAKE BLVD #314 : 
PALM BEACH GARDENS, FL. US 33410 


Article III 
The purpose for which this Limited Liability Company is organized is: 
ANY AND ALL LAWFUL BUSINESS. 


Article IV 


The name and Florida street address of the registered agent is: 


DAVID A KLEIMAN 
3119 CONTEGO LANE 
PALM BEACH GARDENS, FL. 33410 


Having been named as registered agent and to accept service of process for the above stated limited 
liability company at the place designated in this certificate, I hereby accept the appointment as registered 
agent and agree to act in this capacity. I further agree to comply with the provisions of all statutes 
relating to the proper and complete performance of my duties, and I am familiar with and accept the 
obligations of my position as registered agent. 


Registered Agent Signature: DAVE KLEIMAN 


Nimaon/ Sti Daaaon aig 
See etek OP J 
stm Ghee 


Page t of? pages CHARLES McDONALD 
eon tol Junta fe Pune Regain 105174 
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Article V L11000019904 
The name and address of managing members/managers are: pILE wary fe. M4 4 
Title: MGRM Sec. Of Stat 
DAVID A KLEIMAN tcline 


. 4371 NORTHLAKE BLVD #314 
PALM BEACH GARDENS, FL. 33410 US 
Article VI 
The effective date for this Limited Liability Company shall be: 
02/14/2011 
Signature of member or an authorized representative of a member 
Electronic Signature: DAVE KLEIMAN 


I am the member or authorized representative submitting these Articles of Organization and affirm that the 
facts stated herein are true. I am aware that false information submitted in a document to the Department 
of State constitutes a third degree felony as provided for in s.817.155, F.S. I understand the requirement to 
file an annual report between January 1st and May Ist in the calendar year following formation of the LLC 
and every year thereafter to maintain "active" status. 


CO 
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: INTELLECTUAL PROPERTY LICENCE 
FUNDING AGREEMENT ~ 


PARTIES | 


Craig Wright R&D | 
ABN 97 481 146 384 | 
(Financer) } 


AND | 


j 

q 

W&K info Defense LLC | 
(Provider) | 





F » referred to In the Affidavit F 

This he anna mared withthe lateg lone ES Ore ep 
a } 

swemieffimedideetared before me | 


Ref: CEWKO1 > 


} 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 103 of 
€ase 9:18-cv-80176-BB Document 83-4 Enteréd‘on FLSD Docket 01/14/2019 Page 11 of 105 


THIS DEED dated 22 day of April 2011 


BETWEEN 
Craig Wright of Craig Wright R&D 
: (Financer) 
And 
Dave Kleiman for W & K Info Defense LLC 
(Provider) 
RECITALS 


A. The Financer controls the following Bitcoin (BTC) addresses: 
(a) 12hRmmSda9qSSEH656zBakEbeisH6ZhdTm. 
(b) 12C9c9VQLMrLi4Ffzq2wDvwrKnUPaAaNFp. 
B. The Provider desires the intellectual property for the permitted use and to 
extend this for other purposes desirable to both parties. 
C. The Provider will use the funding for the development of several software 
products. 
D. The provider will return the loaned finances (in Bitcoin) on or before 01 July 
2013 and 30 Dec 2013. 
E. The Provider will remain completely confidential on all matters in this deed 
(including even that family members do not have knowledge of the transaction). 
F. The financer will send the following amounts (in Bitcoin) to to following address 
by 30 April 2011: 
(a) 165,140 BTC 
(b) 1MSUvGSS9BEjpL35CKu7feF4HaPCXv2cht7 
G. The financer will send the following amounts (in Bitcoin) to toe following 
address by 30 August 2011: " 


(a) 50,000 BTC LY K PS 
(b) —1ujtxXmbC95sgn5kE2Hm92axA7hcbDkRhK 


H. The Financer and the Provider wish to record the licence, which has been 
granted to the Provider to use the intellectual property in accordance with this 
deed. 

1. | The Financer is the absolute owner of the entire unencumbered copyright in 
the works described in the schedule when complete. 

J. The Financer has agreed to license the works to the Provider and the Provider 
has agreed to accept such licence on the following terms and conditions. 


K. The provider will fund the software development using Bitcoin. 


2 
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L. The Financer will provide 1,024 core Xeon and GPU based hardware solution. 
(a) It is acknowledged that two SGI ICE XE310 — 512 core hosts have 
been provided and are in a data centre specified by the provider 
(b) The provider will use these systems to mine Bitcoin 
(c) The provider expects to earn 12,000 BTC per month using these 
systems for the period to 30 June 2013 
(d) The systems will be hosted in the US at a facility managed by the 
provider. 
M. The provider will pay for the use of the systems and the loan as follows: 
(a) 250,000 BTC to be repaid on 30 June 2013 
(b) 50,000 BTC to be repaid on 30 Dec 2013 
(c) The developed software will be exclusively licensed perpetually to 
the financer (as of 30 June 2013). 
(d) The software may be used but not distributed by the provider. 
N. The contract is complete when 300,000 BTC have been repaid. 
O. It is agreed that the value of the loan to be repaid is $ AUD 20,000,000 in two 
parts (for a total of $40,000,000). 
P. The server systems will return to the Financer at the completion of the contract. 
Q. On default, the contract is to be repaid in full + aioe 
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OPERATIVE PART 
1. Definitions 

In this deed: 

2 (a) Business means the business Operated by the Provider described as 
such in the schedule: 

(b) Business day means a day, not being a Saturday, Sunday or gazetted 
public holiday, on which banks are open for commercial business where 
performance of an obligation under this deed is to take place: 

(c) Claim means, in relation to a person, a claim. demand, remedy, suit, 
injury, damage, loss, cost liability, action, proceeding, right of action, 
chose in action, claim for compensation or reimbursement or liability 
incurred by or to be made or recovered by or against the person, however 
arising and whether ascertained or unascertained, or immediate, future or 
contingent; 

(d) Commencement date means the date so specified in the schedule; 

(e) Confidential information means all technical and ad information and 


know how, including all information and know how i my eye or machine 


readable form or other format, disclosed or given to the Provider from any 
source in respect of or incidental to: 
(i) The product: 
(ii) The technology; K 
(iii) The Financer; and 
(iv) Any other information disclosed or given to the Provider by the 
Financer which is declared by the Financer to be confidential 
information; 
(f) Improvements means any improvement, modification, enhancement or 
derivative of the intellectual property arising during the term: 
(g) Intellectual property means: 
(i) | The confidential information; 
(ii) The improvements: 
(iii) The patent; and a 
(iv) The trade mark: 
(h) Licence fee means the amount calculated and paid by the Provider to the 


Financer specified in the schedule; 


4 
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(i) | Notice means a written notice. consent approval, direction, order or other 
communication: 

(j) | Obligation means any legal, equitable, contractual. Statutory or other 
obligation, deed, covenant, commitment. duty, undertaking or liability; 

(k) Patent means the registered patent or patent application including the 
provisional and complete specifications described in the schedule: 

(1) Permitted use means to conduct the business to exploit market. promote, 
develop, integrate, research, sell and conduct and any other activity 
undertaken with respect to the product for profit or reward: 

(m) Product means the product described as such in the schedule: 

(n) Right includes a legal, equitable, contractual, statutory or other right, 
power, authority, benefit, privilege, remedy. discretion or cause of action; 

(0) Technology means all that technical information which relates to or forms 
part of the product, including, without limitation, methodology, techniques, 
drawings, outlines, notes, algorithms, detailed designs, flow charts, 
results, software: partial or intermediate versions and prototypes, data, 
formulae and other proprietary information and know how in the 
Provider's possession or control or which is revealed to the Provider 
which relates to the product: 

(p) Term means the term set out in the schedule: and i * 

(q) Trade mark means the registered trade mark, trade mark registration 


application and common law trademarks described in the schedule. 


2. Airtaravetauen 


This deed is governed by the law of NSW and the parties submit to the non- 


exclusive jurisdiction of the courts of that state. 


In the interpretation of this deed: 
(a) References to legislation or provisions of iegislation include changes or 
re-enactments of the legislation and statutory instruments and regulations 


issued under the legislation; 


(b) Words denoting the singular include the plural and vice versa: words (OF 


denoting individuals or persons include bodies corporate and vice versa: 
references to documents or deeds also mean those documents or deeds 


5 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 107 of 
Case 9:18-cv-80176-BB Document 83-4 Enteréd $n FLSD Docket 01/14/2019 Page 15 of 105 


as changed, novated or replaced. and words denoting one gender include 
all genders: 

(c) Grammatical forms of defined words or phrases have corresponding 
meanings; 

(d) Parties must perform their obligations on the dates and iimes fixed by 
reference to the schedule: 

(e) Reference to an amount of money is a reference to the amount in the 
lawful currency of the Commonwealth of Australia: 

(f) If the day on or by which anything is to be done is a Saturday, a Sunday 
or a public holiday in the place in which it is to be done, then it must be 
done on the next business day; 

(g) References to a party are intended to bind their executors, adminisirators 


and permitted transferees: and 
(h) Obligations under this deed affect g more than one party bind them 


jointly and each of them severally. 
yr > 


3. Licence ft 
The Financer hereby grants to the Provider an exclus licence to use the 


intellectual property for the permitted use on the terms of this deed. 


In consideration of the licence fee payable hereunder the Financer grants to 
the Provider an exclusive transferrable licence to copy publish sell or otherwise 
use the works in the course of its business in Australia and/or Overseas in 


respect of the whole or any part of the works commencing on 01* July 2013. 






In consideration of the licence hereby granted to the Provider the Provider must 
pay a one off licence fee of $20,000,000 (GST exclusive) to the Financer on or 
before the 30° June 2013. The provider will also transfer the designated 


account of the provider: 


(a) 250,000 BTC to be repaid on 30 June 2013 
(b) 50,000 BTC to be repaid on 30 Dec 2013 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 108 of 
Case 9:18-cv-80176-BB Document 83-4 Ei#fed on FLSD Docket 01/14/2019 Page 16 of 105 


The payment is to be issued in Bitcoin as per the schedule. 


4. Provider’s promises 
- (a) Undertakings 

The Provider undertakes to: 

(i) | Use its reasonable commercial endeavours to: 

(1) Preserve the value and validity of the intellectual property; and 
(2) Create, promote, retain, and enhance the goodwill in the 
intellectual property: 

(ii) During the term and thereafter the termination of this deed not to 
allow or facilitate the use, nor exploit the intellectual property in a 
manner in any way detrimental to the Financer and not contravene, 
deny or contest the rights subsisting in the intellectual property, and 
take such steps as may be appropriate and available to the Provider 
to prevent the infringement of any and all the rights subsisting in the 
intellectual property; 

(iii) In connection with the permitted use not give any warranty: 

(1) Beyond that which the Provider is obliged in law to give; or 
(2) Which has not been approved in writing by the Financer: 

(iv) To use the intellectual property only for the permitted use-and not for 
any other use; -_, 

(v) Treat as confidential the confidential information except that which at 
the time of its disclosure to the Provider was generally available, or 
subsequently became known to the public provided always that this 
covenant shall continue in full force and effect notwithstanding that 
this deed has terminated; and 

(vi) Devote all reasonable commercial endeavours jn the conduct and 
operation of the business. L 

(b) Indemnity 

(i) The Provider hereby agrees to fully, effectually. and promptly 

indemnify the Financer against any ‘oss, either direct or indirect, 


damage or expense whatsoever which the Financer may suffer or . 
incur in respect of: e2 


(1) Any breach by the Provider of the provisions of this deed: or 


7 
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(2) Any claim by any person against the Financer arising out of or 
in respect of the exploitation of the intellectual property by the 
Provider: and 
(ii) The Provider hereby irrevocably releases the Financer and waives 
all claims which the Provider may have in the future against the 
Financer, in respect of any action claim or remedy whatsoever in 
any way attributable to the exploitation of the intellectual property by 
the Provider. 


5. Improvements 
If the Provider develops any improvements, the Financer here irrevocably: 
(a) Grants to the Provider the right to apply for any ia ale intellectual 
property rights available in respect of that improvement and in connection 
with such application, the Financer shall: 

(i) Make, supply and assist in the preparation of all models, plans, 
drawings or specifications necessary or convenient for the proper 
understanding or development of the improvements: and 

(ii) Grant and do all things necessary to give effect to an ssignment of 
the intellectual property rights in respect of the improvements to the 
Provider; 

(b) Assigns, transfers and sets over absolutely to the Provider all right title 
and interest to the improvements including all claims as they relate to the 


improvements. 


6. GST 
(a) GST means a goods and services tax as defined in A New Tax System 
(Goods and Services Tax) Act 1999. 


(b) In respect of any taxable supply, the Provider must pay to the Financer an 
additional amount equal to the prevailing GST rate on the supply. The 
additional amount referred to in this clause is payable at the same time 
and in the same manner as the licence fee subject to the receipt by the 
Provider of a valid tax invoice, as defined in A New Tax System (Goods : 
and Services Tax) Act 1999. 9 
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(a) Term 


7. Term and termination CO Va 
j 


This deed begins on 01% July 2019" the commencement date and will 
continue for the term unless it is earlier terminated. 
(b) Termination on notice 

Either party may terminate this deed by notice in writing to the other if the 
other party commits any breach of any provision of this deed, and has 
failed to remedy such breach within fourteen days of receipt of notice 
Specifying: 

(i) The exact nature of the breach committed by the defaulting party; 

and ee 


(li) What is required by the defaulting party to remedy the breach: 


8. Licence fee 

(a) Payment of licence fee 
The Provider must pay the licence fee specified in the schedule to the 
Financer during the term. a 

(b) Late payment a 
lf the licence fee or any other monies payable by the Provider to the 
Financer remain unpaid for seven days after the due date for payment, 
whether or not formal demand has been made, then the Provider shall 
pay, in addition to any monies actually owing to the Financer, interest at 
the rate of 2% over the bank indicator lending rate nominated by the 
Financer on such monies from the date the payment actually fell due until 


such monies are recovered and paid to the Financer. 


9. Warranties by Financer 
The Financer warrants to the Provider that: 
(a) The Financer has the power and authority to enter into this deed: and 
(b) The intellectual property rights granted under this deed will not when used 


in accordance with this deed infringe the intellectual property rights of any 


person. ee Z 
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10. Third party claim 

(a) Provided that the Provider is not in breach of its Obligations under this 
deed, if a third party makes a claim against the Provider alleging that use 
of the intellectual property infringes its intellectual property rights, the 
Financer will defend, indemnify and hoid harmless the Provider from such 
a Claim provided that the: 

(i) | The Provider notifies the Financer in writing promptly of the claim: 

(i) The Provider provides such information, assistance and co- 
operation as the Financer may reasonably request and at its 
expense, from time to time: and 

(iii) The Financer has full discretion to defend, compromise or settle any 
such claim on such terms as the Financer deems fit. 

(b) If the Financer cannot satisfactorily settle the claim so as to retain 
ownership of the intellectual property, its liability will be limited to 
terminating this deed, and refunding the Provider an amount equal to the 
portion of any licence fee paid for the period following termination. 

(c) Nothing in this clause authorises the Provider to defend, compromise or 


settle any claim on the Financer’s behalf. vA 


ot 


= 
11. Limitation of liability 
(a) Other than in ompelict a party's: 
(i) | Breach of the confidentiality provisions of this deed: or 
(ii) Infringement of another party’s intellectual property rights; or 
(iii) Indemnification obligations under this deed: or 
(iv) Wilful misconduct. 

(b) Neither party will be liable to the other for any consequential, special or 
punitive damages arising out of this deed. Each party's cumulative direct 
damages will be limited to the licence fee payable under this deed in the 
prior twelve month period. This clause survives the termination or 


expiration of this deed. 


10 
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12. Assignment 
No party may assign its rights or obligations under this deed without the prior 
written consent of the other parties. which consent may be given or withheld, or 


given on conditions, in the absolute discretion of those other parties. 


13. Time 
The parties hereto agree that time shall in ail respects be of the essence in 
regards this deed. 


14. Notices 

A communication required by this deed, by a party to another, must be in 

writing and may be given to them by being: 

(a) Delivered personally; or 

(b) Posted to their address specified in this deed, or as later notified by them, 
in which case it will be treated as having raat tes on the second 
business day after posting; or 

(c) Faxed to the facsimile number of the party with acknowledgment of 
receipt received electronically by the sender, when it will be treated as 
received on the day of sending, or fr? 

(d) Sent by email to their email address, when it will be trealed-as received 


on that day. 


15. Waiver or variation 
(a) A party’s failure or delay to exercise a power or right does not operate as 
a waiver of that power or right. 
(b) The exercise of a power or right does not preclude: 
(i) Its future exercise; or 
(ii) The exercise of any other power or right; or 
(ili) The variation or waiver of a provision of this deed or a party’s 


consent to a departure from a provision by another party will be 


4 


ineffective unless in writing executed by the parties. 


11 
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16. Counterpart 
This deed may be executed in any number of counterparts each of which will 
be an original, but counterparts together wiil constitute one and the same 
instrument, and the date of the deed will be the date on which it is executed by 


the last party. 


17. Costs 
(a) Each party will pay its own costs of and incidental to this deed. 
(b) The Provider will bear ali duty payable on this deed and keep indemnified 
the Financer in respect of that liability. 
(c) The Provider will bear all GST payable in fespect of any supply under this 


deed upon receipt of tax invoice issued by the Financer. 


18. Escrow 
(a) The paper Bitcoin Wallet with address 
1933phfhK3ZgF QNLGSDXvqCn32k2buXY8a will be held by the financer 
as assurance or the contract and will convert to the ownership of the 

financer on default of the provider. 
(b) All source code and agreements are to be held in amanner that the 


financer can access on default. C 
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Deed date: 


Licence fee: 


Product: 


Commencement date: 


Term: 


Trademark: 


Patent: 


REFERENCE SCHEDULE 


01% April 2011 


(a) 250,000 BTC to be repaid on 30 June 2013 
(b) 50,000 BTC to be repaid on 30 Dec 2013 
(ex GST) for exclusive perpetual assignment 


Bitcoin and Exchange Software in C/C++/C#/R code 
01% July 2011 
Two (2) years 


All Marks Associated with CO1N and associated marks 
To be filed 


a 
7 \ 


All IP under BAA-001 / 002 / 003 / 004 Ce 
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SIGNED AS A DEED 
Executed by 
W & K Info Defense LLC ) 


in accordance with s.127 ) 
Corporations Act 2001 (CTH) and its constitution ) 


Asti g Kbecman, 


Dave Kleiman 
DIRECTOR 


Executed by 
Craig Wright R&D (A.B.N. 97 481 146 a 


OUI Amel” 
/ MP ccs x 
La ( bp a 
JS r. 
sa / 
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Forms Manager 
Company Officehoiders 


ASIC 


Australian Securities & Investments Commission 


Company: COIN-EXCH PTY. LTD. ACN 163 338 467 


' Company details 


Date company registered 17-04-2013 
Company next review 


tate 17-04-2014 

Company type Australian Proprietary Company 
Company status Registered 

Home unit company No 

Superannuation trustee No 

company 

Non profit company No 

Registered office 


LEVEL 5 , 32-38 DELHI ROAD , MACQUARIE PARK NSW 2113 


Principal place of business 
LEVEL 5 , 32-38 DELHI ROAD , MACQUARIE PARK NSW 2113 





Officeholders 
WRIGHT, CRAIG STEVEN Ths he ancaaury rare wih the roared oAsidany 
Born 23-10-1970 at BRISBANE QLD swornaffirmed TO MO & Gy 
on the day @! os 
43 ST JOHNS AVENUE , GORDON NSW 2072 sass 
Office(s) held: Director, appointed 17-04-2013 mera ja MCDONALD 





Secretary, appointed 17-04-2013 Jeno fhe Peoce Reitatan 105174 


Company share structure 


Share Share description Number issued Total amount paid Total amount 


class unpaid 
FOU FOUNDERS 21500000 21500000.00 0.00 
ORD ORDINARY 20000000 20000000.00 0.00 
Members 

PANOPTICRYPT PTY LTD 43 ST JOHNS AVENUE , GORDON NSW 2072 

Share class Total number held Fully paid Beneficially held 
ORD 17000000 Yes No 
DENARIUZ SG 108 NAMLY AVE , SINGAPORE , SINGAPORE 

Share class Total number held Fully paid Beneficially held 
ORD 3000000 Yes Yes 
WRIGHT , CRAIG STEVEN 43 ST JOHNS AVENUE , GORDON NSW 2072 

Share class Total number held Fully paid Beneficial 

FOU 21500000 Yes lo 


https:/Amww.edg e.asic.g ov.au/004/compportal 7update/r eq uestViewC ompany's=515b8c4 1 ffc534d8fec750629c0af3292b32657 1/2 
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Invoice # 1253 


|e Date: 4/22/2011 





















W&K INFO DEFENSE RESEARCH Craig Wright R&D Craig Wright R&D 


LLC ABN 97 481 146 384 ABN 97 481 146 384 
4371 NORTHLAKE BLVD #314 51 Cowangarra Rd 51 Cowangarra Rd 
PALM BEACH GARDENS Bagnoo NSW 2446 Bagnoo NSW 2446 
FL 33410 +61 417 683 914 +61 417 683 914 
561.310.8801 Customer ID CWROO1 Customer ID CWRDO1 


dave@davekleiman.com 






Shipping. 4. SPIER EI: y F Delivery. “Payment: 


PI OSMe RS ON 502 Method terms. |) Date 5 Te rays 


Dave A Kleiman BAA 001 Software NA By Contract Due on receipt 30 Apr 2011 





j.Ltem: # Description runit Prices Discaunt a7 Line Total 





165,140 Bitcoin BTC loan @ USD 0.88 0.88 145,323 
50,000 Bitcoin BTC loan @ USD 0.88 0.88 44,000 
2 SGI System SGI ICE XE310 lease 4,411,500 8,823,000 
1 Software Per agreement 20,000,000 20,000,000 
BAA-001 ee 650,000 650,000 
BAA-002 mone 2,200,000 2,200,000 
BAA-003 meee a 1,200,000 1,200,000 
BAA-004 oa 1,800,000 1,800,000 
Total Discount 
Subtotal 34,862,323 
Sales Tax 
Total 34,862,323 
Terms in CEWKO1 
Advanced security and research Thank you for your business! 
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‘ . oe 
Dave Kleiman 


From Wikipedia, the free encyclopedia 





Dave Kleiman (1967 - 2013)l1] was a noted Forensic Computer [ 
Dave Kleiman 


Investigator, an author/coauthor of multiple books and a noted speaker 
‘at security related events. [2I[S1I4] Born 1967 
US: 
» Died April 26, 2013 

Contents Palm Beac 


| Occupation Forensic Computer Investigator 
| 






e 1 Computer security & forensics 
refarved to nthe Affidavit F 
e 2 Publications Thisis he annexure markg wi he alt S 
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e 4 Extermal links = 


Fe pages. _ A 


‘S CHARLES MCDONALD _ 
{Jostico of the Pesce Registration 105174 


Website 
http://w w w .davekleiman.cony 















Computer security & forensics 


For a number of years in the 1990s, Kleiman was a sworm law enforcement officer for the Palm Beach County 
Sheriffs Office (PBSO).!II4] While there, he attained the rank of detective. Also, while at the PBSO, he worked as a 
System Security Analyst in the Computer Crimes Division and also helped set up the Computer Forensics Lab. [S1l4] 


Dave Kleiman is a regular contributor to a wide array of online forums and mailing lists where he assists network 
engineers and other IT professionals of varying levels in solving their issues, regardless of the level of difficulty 
involved. Kleiman is also well known as an advisor to engineering professionals in numerous industries. 2)(5I(4] 


Dave also regularly volunteers his time and expertise assisting local and federal law enforcement agencies in cases 
both domestic and intemational in scope. 


He is the creator of the “one-shot server lockdown utility" S-lok for Microsoft Windows servers. [S14] 


On January 1, 2007 he was named Microsoft MVP for Windows - Security 


Publications 


e Co-author: Microsoft Log Parser Toolkit; Syngress Publishing; ISBN 1-932266-52-6 

e Co-author: Security Log Management: Identifying Patterns in the Chaos; Syngress Publishing; ISBN 1-59749- 
042-3 

e Technical editor: Perfect Passwords: Selection, Protection and Authentication; Syngress Publishing; ISBN 1- 
59749-041-5 ; 

e Technical editor: Winternals Defragmentation, Recovery, and Administration Field Guide; Syngress 
Publishing; ISBN 1-59749-079-2 

e CD and DVD Forensics: Technical Editor, ISBN 1-59749-128-4 

e How to Cheat at Windows System Administration: Contributing Author, ISBN 1-59749-105-5 

e Enemy at the Water Cooler: Real Life Stories of Insider Threats, Technical Reviewer, ISBN 1-59749-129-2 

e Rootkits for Dummies: Technical editor, ISBN 978-0-471-91710-6 

e Windows Forensic Analysis Including DVD Toolkit: Technical Editor, ISBN 1-59749-156-X 

e The Official CHFI Study Guide (Exam 312-49): Co-Author, ISBN 1-59749-197-7 


‘References 


1. “"Obituary. Former PBSO deputy dies in his home" (http:/Wwww.m ypalm beachpost.com/news/news/ocal/obit 
form er-pbso-deputy-dies-in-his-home/nXcqR/). Palm Beach Post. Retrieved May 1, 2013. 

2. *2 "SANS WhatWorks Summitin Forensics and Incident Response" 
(http:/Avww.sans.org/orensics09_summit/speakers .php#kleiman). SANS. 

3, 486¢de "ave Kleiman" (http://credencecorp.com/bios/DaveKleiman.html). CredenceCom. 
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4, 4ab¢ de "Dave Kleiman" (http:/www.oreillynet.com/pub/au/2560?x-t=book.view). O'Reilly. 


External links 


e Dave Kleiman's personal web site (http://www.davekleiman.com) 

« Palm Beach County Sheriffs Office (http://www. pbso.org) 

© CastleCops (http://www.castlecops.com) 

° Microsoft MVP Program (https://mvp.support.microsoft.com/mvpexecsum) 

© Microsoft MVP profile (https://mvp.support.microsoft.com/profile=C4ED32CD-9982-45F 2-8636- 
BDE271CODAC2) 


Retrieved from "http://en.wikipedia.org/w/index.php?title=Dave_Kleiman&oldid=553157307" 
Categories: 1967 births | 2013 deaths | People associated with computer security 


This page was last modified on 2 May 2013 at 06:28. 


Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may 
apply. By using this site, you agree to the Terms of Use and Privacy Policy. 
Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization. 
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Craig S Wright 


From: Carter Conrad <carter@computerforensicsllc.com> 

Sent: Tuesday, 30 April 2013 1:23 AM 

To: Patrick Paige 

Ce: Bill Long; Greg Kelley; Craig Ball; Matthew Shannon; Jerry Hatchett; Eric Robi; Greg 


- Freemyer; Paul Henry; Craig S. Wright; Scott Moulton’; Wayne Marney; Bob Bell; Bill 
Dean; Kimon Andreou; Greg Kelley 
Subject: Dave Kleiman 


As close friends of Dave, Patrick and | wanted to let you know in advance of any general posting that we have lost a dear 
friend and colleague... 

As most of you are aware Dave was battling an infection from 2010, and had.never fully recovered in the 2 %+ years that 
followed. 

Dave died in his home in Palm Beach Gardens of, what is being told to us, natural causes. 

At this time no further details are available, although there are plans for a memorial, and these will be pasted on as they 
become available. 


Carter V Conrad, Jr 

Computer Forensics, LLC 

1880 N. Congress Avenue, Suite 333 
Boynton Beach, Florida 33426 
Phone: (561) 404-3074 

Cell: (561) 502-3935 


www.ComputerForensicsLLC.com 


The information contained in this e-mail message is intended only for the personal and confidential use of the recipient(s) named above. This 
message may be an attorney-client communication and/or work product and as such is privileged and confidential. If the reader of this message is 
not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this 
document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this 
communication in error, please notify us immediately by e-mail, and delete the original message. 
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Transactions Filter | : 
ddb352955903db83f76edh8512121051859b214 143... 2011-08-27 02:29:26 


1PWrSe1JjL8wy6uzKzb5d3pCxkNLYm5vi1 
1jtxxmbC95sgn5kE2Hm92axA7hebDkRhK 


a 
rere 


796187761 68cd0ca2ff6c3967 fe28242429cec320e. 201 vate 


12hRmmSda9qSSEH656zBakEbeisH6ZhdTm 
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“Home Charts Stats Wallet 


Bitcoin Address 


Summary 

Address IMS UvGSSBEjpL35CKu7feF4HaPCX2cht7 . 
Short Link http://block chain. info/fb/1 msuv 

Tools Taint Analysis - Related fags - Unspent Outputs 


Transactions 


No. Transactions 2 
Total Received $ 36,551, 156.21 
Final Balance $ 0.00 


eOrmre ere 


Request Payment Donation Button 
ee a ee ee 





Transactions Filter | 


0121f30f11152b3df1 1904401613b1b972a5408682... 2011-04-29 03:20:56 


1B84JfdD4jGUW BehtGF2Phb4BxeN2ytkTxh 
1GEeroqocswE azxzeNAJh3KPPD7C61 XY 2H 


62fec42dd4370e0aeae88b3fe2a997 ObbS56aSd4bi0c... 2011-04-29 03:20:56 


IMSUVGSSBEjpL35CKu7feF4HaPCXv2cht7 


blockchain.info/address/1MSUVGS9BEjpL35C Ku7feF 4HaPC Xv2cht7 1/2 
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_ 


———— 


blockchain.info/address/1MSUvGS9BEjpL35CKu7feF 4HaPC Xv2cht7 
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“Home Charts Stats Wallet 
_ Bitcoin Address 


Summary 

Address IMS UVGSSBEjpL35CKu7feF4HaPCxvechi7 
Short Link http://block chain. info/fo/4msuv 

Tools Taint Analysis - Related Tags - Unspent OQutouts 


Transactions 


No. Transactions 2 
Total Received 165,140 BTC 
Final Balance 0.00 BTC 


—— 
Request Payment Donation Button 
eee 











; 


Transactions Filter | ~ 


0121730f1 1 152b3df11904401e13b1b972a5408682... 2011-04-29 03:20:56 


1B4JfdD4jGUWBehtGF2Phb4B xeN2ytk Txh 
1 GEerogocswEazxzeNAJh3KPPD7C61 XY 2H 


§2fec42dd4370e0aeae88b3fe2a9970bbS56a8d4b{0c... 2011-04-29 


IMSUvVGSS9BEjpL35CKu7feF4HaPCXv2cht7 


blockchain.info/address/1M SUvVGS9BEjpL35C Ku7feF4HaPC Xvacht7 2 
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Sere 


blockchain.info/address/1M SUVGS9BEjpL35C Ku7feF 4HaPC Xv2cht7 2/2 


f 
Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 128 0 
CaSé 9:18-cv-80176-BB Documertt'83-49"ieetecsoroPte8 BeBockes044/2019 Page 36 of 105 


“Home Charts” Stats Wallet 


Bitcoin Address 


Summary 

Address 12hRmmSda9qSSEH6S6zBakEbeisH6Zhd Tin 
Short Link http://blockchain.info/fo/12hrmm 

Tools Taint Analysis - Related Tags - Unspent Outputs 


Transactions 





No. Transactions 2 
Total Received 334,587.42424242 BTC 
Final Balance 0.00 BTC 
i 
Request Payment ‘ Donation Button 
$e a a 





Transactions Filter | 


ddb352955903db83f7 6edb85f2 121051 859b2f4 143... 2011-08-27 02:29:26 


1PWr5e1JjL8wy6uzKzb5d3pCxkNLYm5v41 
1JjtxxmbC95s gn5kE2Hm92axA7hcbDkRhK 


796187f76168cd0ca2ffi6c31967 fe28242429cec320e 2011-08-27 0 726 


12hRmmSda9qSSEH656zBak EbeisH6ZhdTm 


blockchain.info/address/12hRmmSdaSq SSEH656zBakE beisH6ZhdTm 4/2 
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SS 


blockchain.info/address/12hRmmSda$q SSEH656zBaKEbeisH6ZhdTm 2/2 
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Statutory Declaration 
OATHS ACT 1900, NSW, EIGHTH SCHEDULE 


|, Stephen D'Emilio, of Level 3, 2 Bligh Street, Sydney, in the State of New South Wales, 
Solicitor, do solemnly and sincerely declare that: 


1. 


| am the solicitor acting for Mr Craig Wright and Hotwire Pre-emptive Intelligence Pty 
Ltd. 


On 11 October 2013, Mr Wright came into my office and showed me his HTC mobile 
phone (Wright mobile). 


On the screen of the Wright mobile, | viewed and verified the following Bitcoin wallet 
addresses: 


(i) 1JzzLXxuwn45SSHvBqAhkhWa3GhyG3zm64; 

(ii) 168Rc6wJdL4chWhEUQwyywi4sHub6erf2s; 

(iii) | 1FeexV6bAHb8ybZjqQMijJrcCrHGW9sb6uF; 

(iv) 1933phfhK3ZgFQNLGSDXvqCn32k2buXY8a; and 

(v) 16cou7Ht6WjTzuFyDBnht9hmvxXytg6XdVT (Bitcoin wallet addresses). 


| viewed the Bitcoin wallet addresses by scrolling down the screen on the Wright 
mobile. 


It appeared to me that if Mr Wright wanted to, he could control all of, and make 
transactions in, the Bitcoin wallet addresses. 


| make this solemn declaration conscientiously believing the same to be true and by 
virtue of the provisions of the Oaths Act 1900. 


Declared at Sydney on 11 October 2013 


tephen D’Emilio 


in the presence of an authorised witness, who states: 


|, Adrian Fong, a solicitor certify the following matters concerning the making of this statutory 


declaration by the person who made it: 
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(i) | saw the face of the person; © 


(ii) || have known the person for at least 12 months. 





11 October 2013 | | 
U 
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Craig S Wright 


From: BAA Program Support Office <dhsbaa@reisys.com> 
Sent: Wednesday, 2 March 2011 8:56 AM 
To: Craig S. Wright; Craig S. Wright; Craig S. Wright 


Subject: BAA BAA 11-02-TTA 09-0049-WP Upload Received 


Your upload has been received electronically at the DHS BAA Support Office. 
BAA 11-02 Proposal #: BAA 11-02-TTA 09-0049-WP 
Proposal Title: Risk Quantification 
Company Name: W&K INFO DEFENSE RESEARCH LLC 
White Paper Uploaded on: 03/01/11 04:55 PM EST 
File Name: BAA 11-02-TTA 09-0049-WP Risk Quantification.pdf 
File Type: Portable Document Format 
File Size: 357845 bytes 
Uploaded by: Craig S. Wright 
This is your official confirmation of receipt. Please save this email for your records, as no other receipt will be provided. 
Thank you for your participation in the DHS BAA Program. 
Please login to the portal at https://baa2.st.dhs.gov/portal/BAA/ 


If you have any questions, please contact DHS Technical Support at dhsbaa@reisys.com or call (703) 480-7676 


Sincerely, 
DHS BAA Program Support 


ee ae 


on the 
One-pegeoniy 


1 of 4. pages 
Page t of 4. J gare 


| Oe 
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Craig S Wright . , 


From: BAA Program Support Office <dhsbaa@reisys.com> 
Sent: Wednesday, 2 March 2011 9:00 AM 
To: Craig S. Wright; Craig S. Wright; Craig S. Wright 


Subject: BAA BAA 11-02-TTA 01-0127-WP Upload Received 


Your upload has been received electronically at the DHS BAA Support Office. 
BAA 11-02 Proposal #: BAA 11-02-TTA 01-0127-WP 
Proposal Title: Software Assurance through Economic Measures 
Company Name: W&K INFO DEFENSE RESEARCH LLC 
White Paper Uploaded on: 03/01/11 04:59 PM EST 
File Name: BAA 11-02-TTA 01-0127-WP Software Assurance through Economic Measures.pdf 
File Type: Portable Document Format 
File Size: 290708 bytes 
Uploaded by: Craig S. Wright 


This is your official confirmation of receipt. Please save this email for your records, as no other receipt will be provided. 
Thank you for your participation in the DHS BAA Program. 

Please login to the portal at https://baa2.st.dhs.gov/portal/BAA/ 

If you have any questions, please contact DHS Technical Support - dhsbaa@reisys.com or call (703) 480-7676 


Sincerely, 
DHS BAA Program Support 
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Craig S Wright 


From: BAA Program Support Office <dhsbaa@reisys.com> 

Sent: Wednesday, 2 March 2011 10:46 AM 

To: Wright, Craig S.; Wright, Craig S. ; Wright, Craig S. 

Subject: Submission confirmation of your DHS BAA Program Proposal # BAA 11-02-TTA 
e 01-0127-wP 


Your proposal has been received electronically at the DHS Program Support Office. 


BAA 11-02 White Paper Proposal #: BAA 11-02-TTA 01-0127-WP 
Proposal Title: Software Assurance through Economic Measures 
Company Name: W&K INFO DEFENSE RESEARCH LLC 


Proposal Details: 
Cover Sheet A completed on: 02/16/11 02:33 AM EST 
Cover Sheet B completed on: 02/16/11 12:50 AM EST 
White Paper Upload completed on: 03/01/11 04:59 PM EST 
File Name: BAA 11-02-TTA 01-0127-WP Software Assurance through Economic Measures.pdf 
File Type: Portable Document Format 
File Size: 283 KB bytes 


Submitted electronically by: Wright, Craig S. 

This is your official confirmation of receipt. Please save this email for your records, as no other receipt will be provided. 
Thank you for your participation in the DHS BAA Program. 

Please login to the portal at https://baa2.st.dhs.gov/portal/BAA/ 

If you have any questions, please contact DHS Technical Support at dhsbaa@reisys.com or call (703) 480-7676 


Sincerely, 
DHS BAA Program Support 
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Craig S Wright. 


From: BAA Program Support Office <dhsbaa@reisys.com> 

Sent: Wednesday, 2 March 2011 10:53 AM 

To: Wright, Craig S. ; Wright, Craig S. ; Wright, Craig S. 

Subject: Submission confirmation of your DHS BAA Program Proposal # BAA 11-02-TTA 
09-0049-WP 


Your proposal has been received electronically at the DHS Program Support Office. 


BAA 11-02 White Paper Proposal #: BAA 11-02-TTA 09-0049-wP 
Proposal Title: Risk Quantification 
Company Name: W&K INFO DEFENSE RESEARCH LLC 


Proposal Details: 
Cover Sheet A completed on: 02/16/11 02:30 AM EST 
Cover Sheet B completed on: 02/16/11 01:22 AM EST 
White Paper Upload completed on: 03/01/11 04:55 PM EST 
File Name: BAA 11-02-TTA 09-0049-WP Risk Quantification.pdf 
File Type: Portable Document Format 
File Size: 349 KB bytes 


Submitted electronically by: Wright, Craig S. 

This is your official confirmation of receipt. Please save this email for your records, as no other receipt will be provided. 
Thank you for your participation in the DHS BAA Program. 

Please login to the portal at https://baa2.st.dhs.gov/portal/BAA/ 

If you have any questions, please contact DHS Technical Support at dhsbaa@reisys.com or call (703) 480-7676 


Sincerely, 
DHS BAA Program Support 
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Skip Navigation 
° Contact Us 


Ser Homeland | a 
© Security BAA Prog 


DHS Broad Agency Announcements (BAA) Program Portal 
BAA Home 


Basic Research Focus Areas 
High Priority Techno! Areas 
Solicitations ] g 


fr 


a 





Current Solicitations 
- Past Solicitations 

Solicitation Awards 
Proposal Submission 
Awardee Portal 
News And Events 
S&T Directorate Events 
ST Directorate SBIR Website 
Privacy Policy 
FAQs 
Program Portal 


coooooo oc oO Boe @ @ 


Registration Form 


Please do not register yourself MORE THAN ONCE! 


Fill in your registration information below. If there are errors on the registration form, you will be asked to re-enter the Company PIN 
and user password, (Note: For security reason, this page will expire after 20 minutes of inactivity.) 


Re(g)ister | Back | 


* Required Information 





‘Tis ig the annexure marked with \hé lite 
iemation / Statutory Declaration 
swornlafirmedidedtarad-betore no A 
on the & te we 

10% pages CHARLES McDON: 
Page 1 0% syste Che Pouce Reistvtion 105174 
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*Company Name: 


TIN: 





*Address (Line 1): 
Address (Line 2): 
*City: 

State: 

*ZIP+4; 

*Phone: 

Fax: 


*CEO/President's E-mail: 


DUNS + 4: 


CAGE Code: 
Sic: 

FICE: 
Company URL: 


*Year of Company 
Founded: 





*Company PIN: 





*Confirm Company PIN: 


*Salutation: 
“First Name: 
Middle Initial: 
*Last Name: 
*Title: 

*Phone: 

Fax: 

*E-mail Address: 


*Confirm E-mail 
Address: 


*Salutation: 


COMPANY INFORMATION 


|wak INFO DEFENSE RESEARCH LLC 


274997114 


4371 Norhtlake Blvd #314 


_— 


[Palm Beach 


(3341 0 - |6253 


[561-310-8801 
[dave@davekleiman.com 


FL 


Need help for ZIP+4? 


| -| What is DUNS? 


| How dol geta CAGE? 


Whatis a SIC? 
| What is a FICE? 


[nttp:/Aww.information-defense.com/ 


[2011 


COMPANY POINT OF C 


[Me 
[craig Ss SCS 
es 

[Wight —stst—=“‘i~CS;737«7C( 






Why do you need a PIN? 


ONTACT INFORMATION 


[61 (417) 683 914 Ext: { 


craig. wright@information-defense.c 


craig. wright@information-defense.c 


[Mr 


USER INFORMATION 


[* Check here if you are also the Company Point Of Contact. (This will pre-populate your information.) 












E-mail us if you need to modify 
the TIN. 









Company's Phone and Fax. Enter 
only numbers 






9-digit Data Universal Number 
System plus a 4-digit suffix given 
by parent concern 









Provide Full URL 
(http:/www.example.com) 










Should be all numeric; no blank 
spaces allowed. Length must be 
between 4-6 numbers. 












Enter only numbers 






Important! Fill out carefully 





Re-enter E-mail Address 
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‘ities: bag ~~ 
Middle Initial: [S 
- *Last Name: Wigtt 
*Title: [leadResearcher SS” 
*Phone: (61 (417)683914 Ext:[ 
Fax: — 
*E-mail Address: [craig.wright@information-defense.c Important! Fill out carefully 


*Confirm E-mail 
















Enter only numbers 


Addrese: craig.wright@information-defense.c Re-enter E-mail Address 
Only alphanumeric characters 
‘a : [CraigWight SOS : and underscores are allowed. 
Username: |CraigWright Username must be at least 8 


characters. 


Your password must be at least 8 
*Password: |eceecceccecesccces characters long and must have 
an upper case, a lower case, a 
number, and a special character. 
Seaiecsaes Your new password cannot 
Soecccccoocoocosce repeat any of your 8 previous 
passwords. 







*Confirm Password: 







[7 Check here if you want to list yourself as a contact for 
Company's PIN. 





PIN Contact: 






Additional Authentication (used if you forget your password) 


*Select your question: [Who is your favorite person? You will be prompted with this 


question and a new password 
will be issued automatically if 


*Answer to above [Myself your answer matches the one 


question: you give here 








* Required Information 


Re(g)ister | Back | 


DHS Form 10025 (7/07) 


e U.S. Department of Homeland Security 
® Science & Technology 

e S&T Directorate SBIR Website 
OSDBU 

SAFETY Act 

SECURE Program 

Contact Us 
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Craig S Wright 


From: 

Sent: 

To: 

Cc: 

Subject: 
Attachments: 


Importance: 


Dave Kleiman <dave@davekleiman.com> 
Wednesday, 16 February 2011 2:22 PM 
craig.wright@Information-defense.com 
lynn.wright@information-defense.com 
RE: Registration - TTA1 

W&K Info Defense Research LLC - 08.pdf 


High 


Look over the attached real quickly. 


Let me know if it is ok. 


Or should the PoC be in the US??_| see a non US vendor on the list. 


Pay special attention to "Additional Authentication" 


Dave 


noose Original Message----- 


From: Craig S Wright [mailto:craig.wright@information-defense.com] 
Sent: Tuesday, February 15, 2011 22:04 


To: Dave Kleiman 
Subject: RE: Registration - TTA1 


51 Cowangarra Rd 
Bagnoo, New South Wales, 2446 
AU 


The other is not any longer 


-----Original Message----- 


From: Dave Kleiman [mailto:dave@davekleiman.com] 


Sent: Wednesday, 16 February 2011 1:08 PM 


To: craig.wright@Information-defense.com; lynn.wright @information-defense.com 


Subject: RE: Registration - TTA1 


Are either of these your current address? 


51 Cowangarra Rd 
Bagnoo, New South Wales, 2446 
AU 


Level 19, 2 Market Street 
Sydney, NSW 2000 
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AU 


o---- Original Message----- 

From: Dave Kleiman 

Sent: Tuesday, February 15, 2011 14:13 

To: 'craig.wright@Information-defense.com’; 'lynn.wright@information-defense.com' 
Subject: RE: Registration - TTA1 


It is under vendor registration that it requested DUNS see: 
://www.fbo.gov/?s=main&mode=list&tab=register&subtab=step1 





Dave 


-----Original Message----- 

From: Dave Kleiman 

Sent: Tuesday, February 15, 2011 07:29 

To: 'craig.wright@Information-defense.com’; 'lynn.wright@information-defense.com' 
Subject: RE: Registration - TTA1 

Importance: High 


Last page of attached. Do you think | can list you as mgr or mgrm with a foreign address, or you think they would kick it 
back? 


Dave 


-----Original Message----- 

From: Dave Kleiman 

Sent: Tuesday, February 15, 2011 06:35 

To: 'craig.wright@Information-defense.com’; lynn.wright@information-defense.com 
Subject: RE: Registration - TTA1 


Did you already create a username and password? 


From: Craig S Wright [mailto:craig.wright@information-defense.com] 


Sent: Tuesday, February 15, 2011 04:48 


To: Dave Kleiman; lynn.wright@information-defense.com 
Subject: Registration - TTA1 


The first is to do with the attached papers... 


TTA 01 
<https://baa2.st.dhs.gov/portal/action/processRequest.action?eurl=AAAAAAEytBoAAAEuKK8xRZAUQUVTLONCQy9QS0 
NTNVBhZGRpbmcAgAAQABAAAQIDBAUGBwe)CgsMDQ4PAAAAYMUP8ssYOu8SxeEfopmg%2F3IzhM%2F3rhjRC7iE1fh3 
m1MXOKybn1NrHVavYBxleeYUN3 %2F6NSLR8PelSRUjOy6vICWkXCDFPvq9gwzP%2BL6NcP3DCcUZ%2FjCxvX0415tuR%2B 


tlgAU7aqi30%2B%2FBa8MygMsxXUmvOKEcuQ%3D#0> - Software Assurance 





White paper title Software assurance through economic measures 


oe 
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This also leads to the following one with: 


= 


. 


TTA 14 


<https://baa2.st.dhs.gov/portal/action/processRequest.action ?eurl=AAAAAAEytBoAAAEuKK8xREAUQUVTLONCQy9QS0 

NTNVBhZGRpbmcAgAAQABAAAQIDBAUGBwgsJCgsMDO4PAAAAYMUP8ssYOu8SxeEfopmg%2F3IzhM%2F3rhjRC7iE1fh3q 
m1MXOKybniNrHVavYBxleeYUN3%2FENSLR8PelSRUjOy6vicWkXCDFPvq9gwzP%2 BL6NcP3DCCUZ%2FjCxvX0415tuR%2B 
tlgAU7agi30%2B%2FBa8MygMsxUmvQKEcJuQ%3D#13> - Software Assurance MarketPlace (SWAMP) 


White paper title Software derivative markets 
And 


Information Security risk markets 


Greyfog (last email) should also come under TTA 05 


<https://baa2.st.dhs.gov/portal/action/processRequest.action?eurl=AAAAAAEyt BoAAAEUKK8xREAUQUVTLONCQy9QS0 

NTNVBhZGRpbmcAgAAQABAAAQIDBAUG BwegJCgsMDOQ4PAAAAYMUP8ssYOu8SxeEfopmq%2F3IzhM%2F3rhjiRC7iIE1fh3q 
m1MXOKybn1NrHVavYBxleeYUN3%2FENSLR8PeISRUjOy6vicWkXCDFPvq9gwzP%2BLENcP3DCcCUZ%2FjCxvX0415tuR%2B 
tigAU7aqgi30%2B%2FBa8MygMsxXUmvQKEcJuQ%3D#4> - Secure, Resilient Systems and Networks 


Dr. Craig S Wright <http://gse-compliance.blogspot.com/> GSE-Malware, GSE-Compliance, LLM, & ... 
Information Defense <http://www.information-defense.com/> Pty Ltd 


Mobile: 0417 683 914 


Description: Logo4 
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Proposal White Paper 


BAA number, * 





Title of proposal; 


Name of offeror 
Administrative Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


Technical Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


This is the annexuhat mapeked with Waar aa 


-swomnastimedidectared bathe md 
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(Type D , 


BAA 11-02-TTA 01-0127-WP 

Software Assurance through Economic Measures 
W&K INFO DEFENSE RESEARCH LLC 

Dave Kleiman 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
5613108801 

NA 

274997114 


Craig Wright 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
+61 2 4362 1512 
NA 

274997114 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
Owned Enterprise and an Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 


Business Type: 


1|Page 


$650000.00 
36 months 
07/04/2011 


Small Business 
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Executive Summary 


The deficiency of published quantitative data on software development and systems design has 
been a major ground for software engineering’s failure to ascertain a proper scientific 
foundation. Past studies into coding practice have focused on software vendors. These 
developers have many distinctions from in-house projects that are not incorporated into the 
practices and do not align well with in-house corporate code development. In the past, building 
software was the only option but as the industry developed, the build vs. buy argument has 
swung back towards in-house development with the uptake of Internet connected systems. In 
general, this has been targeted towards specialized web databases and online systems with office 
systems and mainstream commercial applications becoming a ‘buy’ decision. 


As companies move more and more to using the web and as ‘cloud applications’ become 
accepted, in-house development is becoming more common. This paper uses an empirical study 
of in-house software coding practices in Australian companies to both demonstrate that there is 
an economic limit to how far testing should proceed as well as noting the deficiencies in the 
existing approaches. 


1.1 Related Work 


Other studies of coding processes and reliability have been conducted over the last few decades. 
The majority of these have been based either on studies of large systems and mainframe based 
operations or have analyzed software vendors. In the few cases where coding practices within 
individual organization have been quantitatively analyzed, the organizations have been nearly 
always large telecommunications firms or have focused on SCADA and other critical system 
providers. 


Whilst these results are extremely valuable, they fail to reflect the state of affairs within the vast 
majority of organizations. With far more small to medium businesses coupled with 
comparatively few large organizations with highly focused and dedicated large scale 
development teams (as can be found in any software vendor), an analysis of in-house practice is 
critical to both security and the economics of in-house coding. 


As the Internet becomes all persuasive, internal coding functions are only likely to become more 
prevalent and hence more crucial to the security of the organization. 


1.2 Our contribution 


We intend to present an analysis using empirical studies to determine and model the cost of 
finding, testing and fixing software bugs. We model the discovery of bugs or vulnerabilities in 
using quantitative functions and calculate the defect rate per SLOC (source line of codes) using 
Bayesian calculations. 


The end solution to the limited and sub-optimal markets that currently exist would be the 


creation of Hedge funds for software security. Sales in software security based derivatives could 
be created on forward contracts. One such solution is the issuing of paired contracts (such as 
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exist in short sales of stocks ). The first contract would be taken by a user and would pay a fixed 

- amount if the software has suffered from any unmitigated vulnerabilities on the (forward) date 
specified in the contract. The paired contract would cover the vendor. If the vendor creates 
software without flaws (or at least mitigates all easily determinable flaws prior to the inception 
of the contract) the contract pays them the same amount as the first contract. 


This is in effect a 'bet' that the software will perform effectively. Ifa bug is discovered, the user 
is paid a predetermined amount. This amount can be determined by the user to cover the 
expected costs of patching and any consequential damages (if so desired). This allows the user to 
select their own risk position by purchasing more or less risk as suits both the risk tolerance and 
the nature of the user's systems. 


Such a derivative (if an open market is allowed to exist) would indicate the consensus opinion as 
to the security of the software and the reputation of the vendor. Such an instrument would allow 
software vendors and users to hedge the risks faced by undiscovered software vulnerabilities. 
These instruments would also be in the interest of the software vendor's investors as the ability to 
manage risk in advance would allow for forward financial planning and limit the negative impact 
that vulnerability discovery has on the quoted prices of a vendors capital. 


This project will model the security of software coding practices in a manner that will lead to 
fewer economic externalities 


Utility to Department of Homeland Security 


The game theoretic approach to this can be modeled looking at the incentives of the business and 
programming functions in the organization. Programmers are optimists. As Brooks noted, "the 
first assumption that underlies the scheduling of systems programming is that all will go well". 
Testing is rarely considered by the normal programmer as this would imply failure. However, the 
human inability to create perfection leads to the introductions of flaws at each stage of 
development. 


Technical Approach 


Just as car dealers buff the exterior and detail the upholstery of a used car, neglecting the work 
that should be done on the engine, software vendors add features. Most users are unlikely to use 
even a small fraction of these features, yet they buy the product that offers more features over the 
more secure product with fewer features. The issue here is that users buy the features over 
security. This is a less expensive option for the vendor to implement and provide. 


The creation of a security and risk derivative should change this. The user would have an upfront 
estimate of the costs and this could be forced back to the software vendor. Where the derivative 
costs more than testing, the vendor would conduct more in-depth testing and reduce the levels of 
bugs. This would most likely lead to product differentiation (as occurred in the past with 
Windows 95/Windows NT). Those businesses who wish to pay for security could receive it. 
Those wanting features would get what they asked for. 


3|Page 


ez 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 145 of 
Case 9:18-cv-80176-BB Document 83-4 Enteréd' an FLSD Docket 01/14/2019 Page 53 of 105 


It is argued that software developers characteristically do not correct all the security 

- vulnerabilities and that known ones remain in the product after release. Whether this is due to a 
lack of resources or other reasons, this is unlikely to be the norm and would be rectified by the 
market. The cost of vendors in share price and reputational losses exceed the perceived gains 
from technical reasons where the fix might break existing applications. The application is already 
broken in the instance of a security vulnerability. 


Users could still run older versions of software and have few, if any, bugs. The issue is that they 
would also gain no new features. It is clear that users want features. They could also choose to 
use only secure software, but the costs of doing so far outweigh the benefits and do not provide a 
guarantee against the security of a system being compromised. As such, the enforced legislation 
of security standards against software vendors is detrimental. A better approach would be to 
allow an open market based system where vendors can operate in reputational and derivative 
markets. 


At the end cf any analysis, security is a risk function and what is most important is not the 
creation of perfectly security systems, but the correct allocation of scarce resources. Systems 
need to be created that allow the end user to determine their own acceptable level of risk based 
on good information. 


The goal of this research project is to create a series of quantitative models for information 
security that can be used to create a software security derivative and insurance market. 
Mathematical modeling techniques that can be used to model and predict information security 
risk will be developed using a combination of techniques including: 


. Economic theory, and Econometrics 
° Quantitative financial modeling, 

. Behavioral Economics, 

° Algorithmic game theory and 

. Statistical hazard/survival models. 


The models will account for heteroscedastic confounding variables and include appropriate 
transforms such that variance heterogeneity is assured in non-normal distributions. Process 
modeling for integrated Poisson continuous-time process for risk through hazard will be 
developed using a combination of: 


. Business financial data (company accountancy and other records), 
. Anti-Virus Industry data 

. Legal databases for tortuous and regulatory costs and 

° Insurance datasets. 


This work and research follows and continues that published as: 


Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 
Embedded Software, Proceedings of the 8th Australian Information Security Management 
Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 
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Charles Sturt University 
http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 
and 


Wright, Craig S. (2010) Software, Vendors and Reputation: an analysis of the dilemma in 
creating secure software, Proceedings of InTrust 2010 The Second International 
Conference on Trusted Systems 13th — 15th December 2010 Beijing, P. R. China 


Charles Sturt University 
and (forthcoming) 


Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 
of Testing Software Bugs, Proceedings of 4th International Conference on Computational 
Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 


Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 
Alternative: Negative Externalities and the Selection of Security Controls, Proceedings of 
4th International Conference on Computational Intelligence in Security for Information 
Systems CISIS 2011 June 8-10th, 2011 


Personnel and Performer Qualifications and Experience 
Craig S Wright (Full CV too long and is available in request) 


Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 
risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 
Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 


Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanovsky, CIFI, CISM, REM, CIPS, Infracritical, Inc. 

Principle, SCADA expert and Author 

(chapter author) of "Corporate Hacking and Technology-driven Crime: Social Dynamics and 
Implication", ISBN 1616928050 and 9781616928056, Information Science Publishing, July 2010. 
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URL: http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime- 
E Implications/dp/1616928050 


"Challenges Faced by the SCADASEC Mailing List", Protecting Canada's Critical Infrastructure 2010 
Control Systems Security Workshop, sponsored by Royal Canadian Mounted Police (Ontario 
Technological Crime), Public Safety Canada and Emergency Management Ontario (Critical Infrastructure 
Assurance Program), Wednesday April 14, 2010 and Thursday, April 15, 2010. 

URL: http://www. infracritical.com/papers/scadasec-201 0-review.zip 

Author of "Critical Infrastructure: Homeland Security and Emergency Preparedness", Second Edition, 
ISBN 1420095277 and 9781420095272, Taylor & Francis CRC Press, December 2009. 

URL: http://www.amazon.co.uk/Critical -Infrastructure-Homeland-Emergency- 

Preparedness/dp/ 1420095277 

Contributor (introduction speaker) of “The Year in Homeland Security”, 2008/2009 Edition (Charles 
Oldham, editor director), Faircount Media Group. 

URL: http://viewer.zmags.com/publication/d1 408 1 39#/d1408 139/12 

Author (co-author) of "Transportation Systems Security", ISBN 1420063782 and 9781420063783, Taylor 


and Francis CRC Press, May 2008. 
URL: http://www.amazon.com/Transportation-Systems-Security-A]lan-McDougall/dp/ 1420063782 


Commercialization Capabilities and Plan 


The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 


Costs, Work, and Schedule 
Amount Requested (in dollars): $650,000.00 


Duration: 36 months 


The funding request will provide full scholarships and positions for three (3) PhD candidates to 
aide in the research and investigation of software security issues and solution, the creation of 
economic models and the publication of an expected 20-30 papers in this field. 


The period is set to three years which includes the completion of the PhD projects and the 
creation of the market, insurance and derivative models. 


: PhD Funding $240,000 

. Supervision $180,000 

. Survey and data Analysis $230,000 
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. 


BAA Number: BAA 1] 1-02-TTA 01-0127-WP 


Offeror Name: W&K INFO DEFENSE RESEARCH LLC 
Title Software Assurance through Economic Measures 


Date: 07/04/2010 


Proposed Technical Approach: 
This project will address and provide measures and 
The analysis will measure the following coding 
errors: 

Format string errors 

Integer Overflows 

Buffer overruns 

SQL Injection 

Cross-Site scripting 

Race Conditions 

° Command Injection. 

Several published papers have been released 
(forthcoming include) 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Quantitative Analysis into the 
Economics of Testing Software Bugs, 
Proceedings of 4th International 
Conference on Computational 
Intelligence in Security for Information 
Systems CISIS 2011 June 8-10th, 2011 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Rationally Opting for the 
Insecure Alternative: Negative 
Externalities and the Selection of 
Security Controls, Proceedings of 4th 
International Conference on 
Computational Intelligence in Security 
for Information Systems CISIS 2011 
June 8-1 0th, 2011 


Authorized Representative: Craig Wright 


Signature: 
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Operational Capability: 

The project will analyze a sample of at least 1,000 
coding projects using existing static analysis tools, 
manual code review and related techniques. Where 
these methods are lacking, proposals and methods 
to integrate existing methods and to fill the gaps 
left will be created. 

Schedule, Cost, Deliverables, & Contact Info: 
Provide any milestone decision points that will be 
required. Describe period of performance and total 
costs. Include the base performance period cost and 
length, and estimates of cost and lengths of 
possible option. 

Deliverables: 

20-30 published papers 

3 PhD Thesis' in the field 

A commercial model for software derivatives and 
insurance markets 


A means to measure and predict the following 
coding errors is being developed 

Format string errors 

Integer Overflows 

Buffer overruns 

SQL Injection 

Cross-Site scripting 

Race Conditions 

Command Injection. 


Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 


Phone: 5613108801 
Email: dave@davekleiman.com 
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Proposal White Paper 


BAA number, + 

Title of proposal; 
Name of offeror 
Administrative Contact: 
Company Name: 





Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 

Technical Contact: 
Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 
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(Type D) 


BAA 11-02-TTA 09-0049-WP 

Risk Quantification 

W&K INFO DEFENSE RESEARCH LLC 
Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 

5613108801 

NA 

274997114 

Craig Wright 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
+61 2 4362 1512 
NA 

274997114 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
Owned Enterprise and a Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 
Business Type: 
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$2,200,000.00 
36 months 
07/04/2011 
Small Business 
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Executive Summary 

Using empirical evidence, this research aims to investigate and quantify the root cause of 

security flaws that act as a source of system compromise. Research into the effects of poor 

system design, market based risk solutions based on derivative instruments and the impact of 
common system misconfigurations will be incorporated into multivariate survival models. This 
research incorporates the economic impact of various decisions as a means of determining the 
optimal distribution of costs and liability when applied to information security and in particular 
when assigning costs in computer system security and reliability engineering. 

The objective of this research is to produce an innovative modelling architecture designed 

around information systems security and risk based reliability and survivability analysis. The 

objectives of the research are: 

(1) To address the critical limitations (Jeanblanc & Valchev, 2005) that are associated with 
reliability engineering in regards to computer systems. This will be completed with 
competing risks analysis and multivariate survival analysis coupled with a game theoretic 
approach. Data collected from an analysis of systems in the field will be used to test 
assumptions. These assumptions (Marti, 2008) include: 


a. constant and homogenous failure rates, 
b. binary failure and univariate reliability, 
c. censoring of failure data, and 

d. independent failures. 

(2) To produce a methodology for the creation and testing of hazard and survival models for 
information systems. This will become a risk based quantitative approach to reliability and 
survivability engineering. 

(3) To incorporate methods that represent the effects of misaligned incentives and their 
consequence to security controls. 

To do this, it is necessary to recognise that information security is a risk function (Anderson, 

Longley & Kwok, 1994). Paying for too much security can be more damaging in economic terms 

than not buying enough. This leads to decisions about where the optimal expenditure on damage 

prevention should lie. This research will investigate who should be responsible for the security 
failures that are affecting the economy and society and how can this be maximized in order to 
minimize negative externalities (Cohen, 1976). The conclusions will be presented using an 
empirical study of software hazard rates and audit failures along with the question of how to 
enforce liability in a global economy. 


The research is intended to address some of the economic issues that are arising due to an 
inability of assign risk correctly, a failure to measure risk as well as looking at the misalignment 
of information systems audit and the compliance regime. The externalities that restrict the 
development of secure software and how the failure of the end user to apply controls makes it 
less probable that a software vendor will enforce stricter programming controls with failures in 
the audit and measurement processes are addressed. This includes a look at the misalignment of 
audit to security. This misalignment is demonstrated to result from the drawing of funds from 
security in order to provide compliance with little true economic gain (Wright, 2010). 

The introduction of Game Theory and Behavioural Economics (Anderson, 2001; Anderson, & 
Moore, 2006; Varian, 2004) have created a foundation for the rationalisation of information 
security processes which lead to improved allocation of economic resources. The optimal 
distribution of economic resources across risk allocations in information system can only lead to 
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a combination of more secure systems for a lower overall cost. This research will incorporate the 

: game theoretic multi-player decision problem. Agents in the model will be deemed to be rational 
with well-defined preferences, include the ability to reason strategically using their knowledge 
and belief of other players and to act according to a combination of both economic "first 
thought" and deep strategic thinking (Nissan, et. al., 2007). Solutions to these models will be 
sought through a combination of the following game devices: 


e Equilibrium: evolutive (steady state) games 

e Heterogeneous sequential games 

¢ Rationalisability: deductive reasoning 
The models will detail the existence of strictly dominating games where these exist in 
information security practices and propose methods to improve these models. Existing 
information security practices in existing organisations will be classified into the following game 
types: 

¢ Non-cooperative vs. cooperative game 

e Strategic vs. extensive game 

e Perfect vs. imperfect information 
Bounded rationality, behavioural game aspects and other feedback effects will be investigated 
(Nissan, et. al., 2007). Social capital based on fairness and reciprocity will be defined as it 
applies to the economically efficient application of risk processes associated with Information 
systems. Contract Theory will be used to explain the creation of agreements and “contracts” in 
the presence of information asymmetry. This is approached through the combination of adverse 
selection, moral hazards and the “signalling game”. In this, adverse selection is defined as the 
“Principal not having been informed of the other agent’s private information ex-ante” such as in 
George Akerlof’s “Market for lemons” (1970). This application of game theory has been asserted 
to explain many aspects of the software industries predisposition to create insecure software 
(Anderson, 2001). Arora, Telang and Xu (2004) asserted that a market-based mechanism for 
software vulnerabilities would necessarily underperform a CERT-type mechanism. The market 
that they used was a game theoretic pricing game. In the model reported, the players in the 
market do not report their prices’. These players use a model where information is distributed 
simultaneously to the client of the player and the vendor. The CERT model was touted as being 
the most favourable solution. The research will demonstrate that the examined "market" model is 
in itself sub-optimal. It both creates incentives to leak information without proper safeguards and 
creates vulnerability black-markets that rely on waiting until a patch was publically released and 
only then releasing the patch to the public. This ignores many externalities and assumes the only 
control is a patch in place of other alternative compensating controls. It is to be demonstrated 
that there are flaws with this approach that can be solved through the creation of a security and 
risk derivative market for software. The user would have an upfront estimate of the costs and this 
could be forced back to the software vendor. Where the derivative costs more than testing, the 
vendor would conduct more in-depth testing and reduce the levels of bugs (Bacon et. al. 2009). 


1.2 Our contribution and Technical Approach 


We intend to present an analysis using empirical studies to determine and model the cost of 
finding, testing and fixing security vulnerabilities. The goal of this research project is to create a 
series of quantitative models for information security. Mathematical modelling techniques that 


, E.g., iDefense Ltd. and other similar providers have a semi-closed market with limited information exchange. 
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can be used to model and predict information security risk will be developed using a 
combination of techniques including: 


Economic theory, and Econometrics 
Quantitative financial modelling, 
Behavioural Economics, 
Algorithmic game theory and 

e Statistical hazard/survival models. 
The models will account for heteroscedastic confounding variables and include appropriate 
transforms such that variance heterogeneity is assured in non-normal distributions. Process 
modelling for integrated Poisson continuous-time process for risk through hazard will be 
developed using a combination of: 


e Business financial data (company accountancy and other records), 

e Anti-Virus Industry data 

e Legal databases for tortuous and regulatory costs and 

e Insurance datasets. 
This data will be coupled with hazard models created and validated using Honeynets (e.g. Project 
Honeynet), reporting sites such as the Internet Storm Centre and iDefence. The combination of 
this information will provide the framework for a truly quantitative security risk framework”. At 
present, the DShield storm centre receives logging from over 600,000 organisations. This 
represents a larger quantity of data than is used for actuarial data in the home insurance industry. 
The problem being that this information is not collated or analysed in any quantitatively sound 
manner. This research will model survival times for types of applications using the body of 
research into quantitative code analysis for risk. The research will create a series of models (such 
as those used within mechanical engineering, material science etc) for Information Risk. 


Some of the methods that are planned testing in the creation of the risk framework will include: 


Random forest clustering, 

K-means analysis, 

Other classification algorithms, and 

Network associative maps in text analysis forensic work. 


The correlation of reference data (such as IP and functional analysis data) between C&C 
(Command and Control) systems used in “botnets” is one aspect of this research. Starting from 
the outside (the cloud and perimeter) and working inwards to the network, the risk model would 
start by assessing external threats and move into internal threat sources, becoming gradually 
become more and more granular as one moves from network to individual hosts and finally to 
people (user behaviour (Varian, 2004)) and application modelling (Guo, Jarrow, & Zeng, 2005). 
The eventual result will be the creation of a model that can incorporate the type of organisation, 
size, location, application, systems used, and the user awareness levels to create a truly 
quantitative risk model. This would be reported with SE (standard error) and confidence level 
rather than a point estimate. Code to import data from hosts and networks, using raw “pcap 
traces”? will be developed such that system statistics and other data can be collated into a 
standardised format. This code will be developed in “R” and “C++”. This will enable the 


? Support has been sought and received from SANS (including DShield), CIS (Centre for Internet Security) and the 
Honeynet project. 
~ Pcap is a packet capture standard supported by both open source and commercial network capture equipment. 
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creation and release of actuarial threat risk models that incorporate heterogeneous tendencies in 
variance across multidimensional determinants while maintaining parsimony. I foresee a 
combination of Heteroscedastic predictors (GARCH/ARIMA etc) coupled with non-parametric 
survival models. I expect that this will result in a model where the underlying hazard rate (rather 
than survival time) is a function of the independent variables (covariates). Cox's Proportional 
Hazard Model with Time-Dependent Covariates would be a starting point, going to non- 
parametric methods if necessary. The end goal will be to create a framework and possibly a 
program that can assess data stream based on a number of dependant variables (Threat models, 
system survival etc) and covariates and return a quantified risk forecast and standard error. 
Utility to Department of Homeland Security 
When a system fails, it often can fail in numerous ways with several causes for the failure 
(Crowder 2001). Censored observation management can be considered the principal factor 
influencing survival analysis. Survival analysis and has developed rigorous procedures and 
methods effective for the treatment of censored data based on probability theory, asymptotic 
counting and stochastic process as well as the Martingale central limit theorem. References to the 
univariate analysis of survival is found in Cox (1972), Cox and Oakes (1984), Fleming and 
Harrington (1991), Andersen et al (1993), Kalbfleisch and Prentice (1980, 2002), Klein and 
Moeschberger (2003), Ibrahim et al. (2005), Lawless (1982, 2003), Ma and Krings (2008). 
Modeling risk allows it to be measured and controlled. 
This work and research follows and continues: 

Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 

Embedded Software, Proceedings of the 8th Australian Information Security Management 

Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 

Charles Sturt University 

http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 
and (forthcoming) 

Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 

of Testing Software Bugs, Proceedings of 4th International Conference on Computational 

Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 

Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 

Alternative: Negative Externalities and the Selection of Security Controls, Proceedings of 

4th International Conference on Computational Intelligence in Security for Information 

Systems CISIS 2011 June 8-10th, 2011 

_ Personnel and Performer Qualifications and Experience 

Craig S Wright (Full CV too long and is available in request) 
Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 
risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 
Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
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New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 
Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanovsky, CIFI, CISM, REM, CIPS, Infracritical, Inc. 
Principle, SCADA expert and Author 
URL: http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime- 
Implications/dp/1616928050 
URL: http://www. infracritical.com/papers/scadasec-20 1 0-review.zip 
URL: http://www.amazon.co.uk/Critical-Infrastructure-Homeland-Emergency- 
Preparedness/dp/ 1420095277 
URL: http://viewer.zmags.com/publication/d1408 139#/d1408139/12 
URL: http://www.amazon.com/Transportation-Systems-Security-A llan-McDougall/dp/1420063782 
Commercialization Capabilities and Plan 
The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 
Costs, Work, and Schedule 
Amount Requested (in dollars): $2,200,000.00 
Duration: 36 months 
The funding request will provide full scholarships and positions for three (3) PhD candidates to 
aide in the research and investigation of software security issues and solution, the creation of 
economic models and the publication of an expected 20-30 papers in this field. 
The period is set to three years which includes the completion of the PhD projects and the 
creation of the market, insurance and derivative models. 


: PhD Funding $480,000 
: Supervision $350,000 
. Survey and data Analysis $230,000 
. Research Fellowships (2) $260,000 
. Administration $120,000 
: Costs (Computational Systems) $660,000 
: Support Costs (Coding) $300,000 
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BAA Number: BAA 11-02-TTA 01-0127-WP 
Offeror Name: W&K INFO DEFENSE RESEARCH LLC 
Title Risk Quantification 

Date: 07/04/2010 
Operational Capability: 
The research is intended to address some of the economic issues that are arising due to an inability 
of assign risk correctly, a failure to measure risk as well as looking at the misalignment of 
information systems audit and the compliance regime. The externalities that restrict the 
development of secure software and how the failure of the end user to apply controls makes it less 
probable that a software vendor will enforce stricter programming controls with failures in the 
audit and measurement processes are addressed. This includes a look at the misalignment of audit 
to security. This misalignment is demonstrated to result from the drawing of funds from security 
in order to provide compliance with little true economic gain (Wright, 2010). 
Schedule, Cost, Deliverables, & Contact Info: 
Deliverables: 

30-40 published papers 

3 PhD Thesis' in the field 

A commercial model for modeling information risk 











































Proposed Technical Approach: 
The objective of this research is to produce an 
innovative modeling architecture designed 
around information systems security and risk 
based reliability and survivability analysis. The 
objectives of the research are: 


(1) To address the critical limitations 
(Jeanblanc & Valchev, 2005) that are associated 
with reliability engineering in regards to 
computer systems. This will be completed with 
competing risks analysis and multivariate 
survival analysis coupled with a game theoretic 
approach. Data collected from an analysis of 
systems in the field will be used to test 
assumptions. These assumptions (Marti, 2008) 
include: 


a. constant and homogenous failure rates, 
b. binary failure and univariate reliability, 
é censoring of failure data, and 

d independent failures. 


(2) To produce a methodology for the 
creation and testing of hazard and survival 
models for information systems. This will 
become a risk based quantitative approach to 
reliability and survivability engineering. 

(3) To incorporate methods that represent 
the effects of misaligned incentives and their 
consequence to security controls. 





































Several published papers have been released 
(forthcoming include) 


Wright, Craig S. and Zia, Tanveer A (2011) A 
Quantitative Analysis into the Economics of Testing 
Software Bugs, Proceedings of CISIS 2011 June 8- 
10th, 2011 


Wright, Craig S. and Zia, Tanveer A (2011) A 
Rationally Opting for the Insecure Alternative: 
Negative Externalities and the Selection of Security 
Controls, Proceedings of CISIS 2011, 2011 


Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 

Phone: 5613108801 

Email: dave@davekleiman.com 























Authorized Representative: Craig Wright 


Signature: bh f “J, 


7|Page 


Proposal White Paper 


BAA number, * 

Title of proposal; 
Name of offeror 
Administrative Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


Technical Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 
State & Zip Code: 
Phone: 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
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W&K INFO DEFENSE RESEARCH LLC 

Dave Kleiman 
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Owned Enterprise and a Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 


Business Type: 
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Executive Summary 

- This project will develop the optimal derivative and risk strategy for software markets. A game 
theoretic approach to this will be modeled looking at the incentives of the business and 
programming functions in the organization. Programmers, as optimists (Brooks) hold, "the first 
assumption that underlies the scheduling of systems programming is that all will go well". 
Testing is rarely considered by the normal programmer as this would imply failure. However, the 
human inability to create perfection leads to the introductions of flaws at each stage of 
development. This project will deliver frameworks designed to optimize the software 
development process and to sell the risk using a derivative market place that reflects this risk. 
The end goal is to remove externalities from the costs of software and incorporate the cost of bad 
software design into the final cost to the consumer. 
The deficiency of published quantitative data on software development and systems design has 
been a major ground for software engineering’s failure to ascertain a proper scientific 
foundation. Past studies into coding practice have focused on software vendors. These 
developers have many distinctions from in-house projects that are not incorporated into the 
practices and do not align well with in-house corporate code development. In the past, building 
software was the only option but as the industry developed, the build vs. buy argument has 
swung back towards in-house development with the uptake of Internet connected systems. In 
general, this has been targeted towards specialized web databases and online systems with office 
systems and mainstream commercial applications becoming a ‘buy’ decision. 
As companies move more and more to using the web and as ‘cloud applications’ become 
accepted, in-house development is becoming more common. This paper uses an empirical study 
of in-house software coding practices in Australian companies to both demonstrate that there is 
an economic limit to how far testing should proceed as well as noting the deficiencies in the 
existing approaches. 
1.1 Related Work and our contributions 
This research will seek to demonstrate that a well-defined software risk derivative market would 
improve the information exchange for both the software user and vendor removing the oft touted 
imperfect information state that is said to belie the software industry. In this way, users could 
have a rational] means of accurately judging software risks and costs and as such the vendor 
could optimally apply their time between delivering features and averting risk in a manner 
demanded by the end user. After all, it is of little value to increase the cost per unit of software 
by more than an equal compensating control. 
Arora, Telang and Xu asserted that a market based mechanism for software vulnerabilities will 
necessarily underperform a CERT-type mechanism. The market that they used was a game 
theoretic pricing game. In the model reported, the players in the market do not report their prices. 
These players use a model where information is simultaneously distributed to the client of the 
player and the vendor. The CERT model was touted as being optimal. It relies on waiting until a 
patch was publically released and only then releasing the patch to the public. This ignores many 
externalities and assumes the only control is a patch in place of other alternative compensating 
controls. 
Consequently, the examined "market" model is in itself sub-optimal. It both creates incentives to 
leak information without proper safeguards and creates vulnerability black-markets. As criminal 
groups and selected security vendors (such as Penetration testers and IDS vendors) have an 
incentive to gain information secretly , they have an incentive to pay more for unknown 
vulnerabilities in a closed market. This means that a seller to one of these parties has a 
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reputational incentive to earn more through not releasing information as the individual's 
reputation will be based on their ability to maintain secrecy. 

"Vulnerability disclosure adversely and significantly affects the stock performance of a software 
vendor. We show that, on average, a software vendor loses around 0.63% of market value on the 
day of the vulnerability announcement. This translates to a dollar amount of $0.86 billion loss in 
market value. We also show that markets do not penalize a vendor any more if the vulnerability 
is discovered by a third party than by the vendor itself." 

These results demonstrate that a vendor has an incentive to minimize the vulnerabilities found in 
their products. If an excessive number of vulnerabilities continue to impact a vendor, their 
market capitalization suffers as a consequence. This justification offers strong evidence that a 
vendor does not have an incentive to hide information (as third party vulnerability researchers 
cause an equal loss in capitalization). It has to be expected that any vulnerability known by the 
vendor will be uncovered. If the vendor fixes this flaw before release, the cost is minimized and 
at the limit approaches the cost of testing, (that is a zero incremental cost to that which would be 
expressed later). 

If the vendor discovers a vulnerability in the software they produce, the result is a ‘strongly 
dominated' motive to fix the bug. Hence, any remaining bugs are those that have not been 
uncovered by the vendor and which are less economical to find (through an increase in testing). 
It can thus be demonstrated that the vendor knows no more than the user at the point of software 
release as to the state of bugs in a product. 

Testing is far less expensive earlier in the development cycle. Early in the process, the software 
developer has the greatest returns in testing and bug finding. As the development progresses, the 
returns are reduced as the process required and the costs associated with finding and correcting 
software vulnerabilities increases. 

The utility is lowest when the software has been shipped to the user. At this point, fixing flaws is 
an expensive process for both the user and the vendor. This leaves the optimal solution to find as 
many bugs as possible as early in the development process as is feasible. This contrasts with the 
increasing costs of finding bugs. This leaves the optimal solution for the vendor based on the 
discovery of as many bugs as possible as early in the development process as is feasible (as a bug 
discovered early in the process can cost as much as 10x less than one discovered later) . It does 
not mean that all bugs or vulnerabilities will be found as the cost of finding additional 
vulnerabilities quickly exceeds the returns. 

The market for lemons requires that the vendor knows the level of flaws better than the user. To 
many this may seem a common sense outcome, the vendor has access to source code, wrote the 
program and ran the development process. This is a flawed view as we have demonstrated as it is 
in the vendor’s interest to mitigate vulnerabilities as early as possible. More importantly, the 
vendor is punished for bugs. 

1.2 Our contribution 

We intend to present an analysis using empirical studies to determine and model the cost of 
finding, testing and fixing software bugs. We model the discovery of bugs or vulnerabilities in 
using quantitative functions and calculate the defect rate per SLOC (source line of codes) using 
Bayesian calculations. 

The end solution to the limited and sub-optimal markets that currently exist would be the 
creation of Hedge funds for software security. Sales in software security based derivatives could 
be created on forward contracts. One such solution is the issuing of paired contracts (such as 
exist in short sales of stocks ). The first contract would be taken by a user and would pay a fixed 
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amount if the software has suffered from any unmitigated vulnerabilities on the (forward) date 
specified in the contract. The paired contract would cover the vendor. If the vendor creates 
software without flaws (or at least mitigates all easily determinable flaws prior to the inception 
of the contract) the contract pays them the same amount as the first contract. 

This is in effect a 'bet' that the software will perform effectively. If a bug is discovered, the user 
is paid a predetermined amount. This amount can be determined by the user to cover the 
expected costs of patching and any consequential damages (if so desired). This allows the user to 
select their own risk position by purchasing more or less risk as suits both the risk tolerance and 
the nature of the user's systems. 

Such a derivative (if an open market is allowed to exist) would indicate the consensus opinion as 
to the security of the software and the reputation of the vendor. Such an instrument would allow 
software vendors and users to hedge the risks faced by undiscovered software vulnerabilities. 
These instruments would also be in the interest of the software vendor's investors as the ability to 
manage risk in advance would allow for forward financial planning and limit the negative impact 
that vulnerability discovery has on the quoted prices of a vendors capital. 

This project will model the security of software coding practices in a manner that will lead to 
fewer economic externalities 

Utility to Department of Homeland Security 

In economic terms, we want to assign liability such that the optimal damage mitigation strategy 
occurs. The victim will mitigate their damages where no damages for breach apply in respect of 
the optimal strategy and payoffs. The rule that creates the best incentives for both parties is the 
doctrine of avoidable consequences (marginal costs liability). 

Mitigation of damages is concerned with both the post-breach behaviors of the victim and the 
actions of the party to minimize the impact of a breach. In a software parlays', this would incur 
costs to the user of the software in order to adequately secure their systems. This again is a trade- 
off. Before the breach (through software failures and vulnerabilities that can lead to a violation of 
a system's security), the user has an obligation to install and maintain the system in a secure 
state. The user is likely to have the software products of several vendors installed on a single 
system. Because of this, the interactions of the software selected and installed by the user span 
the range of multiple sources and no single software vendor can account for all possible 
combinations and interactions. 

Any pre-breach behavior of the vendor and user of software needs to incorporate the capability 
of the vendors to both minimize the liability attached to their own products, as well as the 
interactions of other products installed on a system. It is feasible to deploy one of several options 
that can aid in the minimization of the effects of a breach due to a software problem prior to the 
discovery of software vulnerabilities, these include: 


1. The software vendor can implement protective controls (such as firewalls) 

2. The user can install protective controls 

3. the vendor can provide accounting and tracking functions 

The following steps further facilitate in minimizing the effects of software vulnerabilities: 
1. The vendor can employ more people to test software for vulnerabilities 

2: The software vendor can add additional controls 


Where more time is expended on the provision of software security by the vendor (hiring more 
testers, more time writing code etc), the cost of the software needs to reflect this additional 
effort, hence the cost to the consumer increases. This cost is divisible in the case of a widely 
deployed Operating System (such as Microsoft Windows) where it is easy to distribute the 
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incremental costs across additional users. Smaller vendors (such as small tailored vendors for the 
Hotel accounting market) do not have this distributional margin and the additional controls could 

result in a substantial increase in the cost of the program. 

Technical Approach 

The goal of this research project is to create a series of quantitative models for information 

security that can be used to create a software security derivative and insurance market. 

Mathematical modeling techniques that can be used to model and predict information security 

risk will be developed using a combination of techniques including: 


° Economic theory, and Econometrics 
° Quantitative financial modeling, 

. Behavioral Economics, 

. Algorithmic game theory and 

. Statistical hazard/survival models. 


The models will account for heteroscedastic confounding variables and include appropriate 
transforms such that variance heterogeneity is assured in non-normal distributions. Process 
modeling for integrated Poisson continuous-time process for risk through hazard will be 
developed using a combination of: 


. Business financial data (company accountancy and other records), 
° Anti-Virus Industry data 

° Legal databases for tortuous and regulatory costs and 

° Insurance datasets. 


This work and research follows and continues that published as: 
Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 


Embedded Software, Proceedings of the 8th Australian Information Security Management 
Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 
Charles Sturt University 
http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 

and 
Wright, Craig S. (2010) Software, Vendors and Reputation: an analysis of the dilemma in 
creating secure software, Proceedings of InTrust 2010 The Second International 
Conference on Trusted Systems 13th — 15th December 2010 Beijing, P. R. China 
Charles Sturt University 

and (forthcoming) 
Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 
of Testing Software Bugs, Proceedings of 4th International Conference on Computational 
Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 
Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 
Alternative: Negative Externalities and the Selection of Security Controls, CISIS 2011 
June 8-10th, 2011 


Personnel and Performer Qualifications and Experience 
Craig S Wright (Full CV too long and is available in request) 


Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 


5|Page 


CL 


Case 9:18-cv-80176-BB Document 511-9 Entered on FLSD Docket 05/18/2020 Page 161 of 
Case 9:18-cv-80176- BB Document 83-4 Enterédo On FLSD Docket 01/14/2019 Page 69 of 105 


risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 

7 Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 


Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanovsky, CIFI, CISM, REM, CIPS, Infracritical, Inc. 

Principle, SCADA expert and Author 

(chapter author) of "Corporate Hacking and Technology-driven Crime: Social Dynamics and URL: 
http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime-Implications/dp/16 16928050 


URL: http://www. infracritical.com/papers/scadasec-20 10-review.zip 

URL: http://www.amazon.co.uk/Critical-Infrastructure-Homeland-Emergency- 

Preparedness/dp/ 1420095277 

URL: http://viewer.zmags.com/publication/d1408139#/d1408 139/12 

URL: http://www.amazon.com/Transportation-Systems-Security-A llan-McDougall/dp/1420063782 


Commercialization Capabilities and Plan 


The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 


Costs, Work, and Schedule 

Amount Requested (in dollars): $1,200,000.00 

Duration: 36 months 
‘The funding request will provide full scholarships and positions for three (3) PhD candidates to 
aide in the research and investigation of software security issues and solution, the creation of 
economic models and the publication of an expected 20-30 papers in this field. The period is set 
to three years which includes the completion of the PhD projects and the creation of the market, 
insurance and derivative models. 


. PhD Funding $360,000 
: Supervision $180,000 
. Survey and data Analysis $220,000 
. Administration $120,000 
. Core Systems $220,000 
. Marketing of system and test use $100,000 


BAA Number: BAA 11-02-TTA 01-0127-WP 
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Offeror Name: W&K INFO DEFENSE RESEARCH LLC 


Title 
BAA 11-02-TTA 14-0025-WP 


Date: 07/04/2010 


Proposed Technical Approach: 
This project will address and provide measures and 
The analysis will measure the following coding 
errors: 

Format string errors 

Integer Overflows 

Buffer overruns 

SQL Injection 

Cross-Site scripting 

Race Conditions 

° Command Injection. 

In addition, market models for selling 
vulnerabilities will be developed and tested. A first 
stage vulnerability and risk marketplace will be 
developed. 


Several published papers have been released 
(forthcoming include) 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Quantitative Analysis into the 
Economics of Testing Software Bugs, 
Proceedings of 4th International 
Conference on Computational 
Intelligence in Security for Information 
Systems CISIS 2011 June 8-10th, 2011 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Rationally Opting for the 
Insecure Alternative: Negative 
Externalities and the Selection of 
Security Controls, Proceedings CISIS 
2011 June 8-10th, 2011 


Authorized Representative: Craig Wright 


Signature: 
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Software Derivative Markets & Information Security Risk 


Operational Capability: 

The project test, develop and test a combination of 
insurance and derivative based risk markets for 
both software security and information risk 
minimization. 

Schedule, Cost, Deliverables, & Contact Info: 
This project will develop the optimal derivative and 
risk strategy for software markets. A game 
theoretic approach to this will be modelled looking 
at the incentives of the business and programming 
functions in the organization. Programmers, as 
optimists (Brooks, ) hold, 

"the first assumption that underlies the scheduling 
of systems programming is that all will go well". 
Testing is rarely considered by the normal 
programmer as this would imply failure. However, 
the human inability to create perfection leads to the 
introductions of flaws at each stage of 
development. This project will deliver frameworks 
designed to optimize the software development 
process and to sell the risk using a derivative 
market place that reflects this risk. The end goal is 
to remove externalities from the costs of software 
and incorporate the cost of bad software design into 
the final cost to the consumer. 

Deliverables: 

20-30 published papers 

3 PhD Thesis' in the field 

A commercial model for software derivatives and 
insurance markets 

Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 

Phone: 5613108801 

Email: dave@davekleiman.com 
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(Type I) 


BAA 11-02-TTA 05-0155-WP 

SCADA Isolation 

W&K INFO DEFENSE RESEARCH LLC 
Dave Kleiman 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
5613108801 

NA 

274997114 


Craig Wright 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
+61 2 4362 1512 
NA 

274997114 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
Owned Enterprise and a Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 


Business Type: 
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Executive Summary 

This project involves the creation of a SCADA targeted filter. This filter will act as a security 
gateway allowing users to access legacy systems that do not support modern encrypted protocols 
to do so whist not having to interfere with the existing system. At the same time, advanced 
threats and Malware (such as STUXNET) will be isolated from the systems using a bridged 
firewall layer. This system will in itself be isolated and resilient and be capable of reliable action 
when power and other failures occur. It will collate and report attacks seamlessly allowing 
Internet connected management and monitoring systems to co-exist on treacherous networks in a 
cloud environment. 


The Revenant device is an embedded Linux-based appliance with an RFC compliant IPSec and 
Stateful firewall implementation built into the kernel. It is built using embedded Linux and is 
completely solid state with no moving parts to fail and no hard drive. It also utilises kernel-based 
IPSec. Designed as an appliance, this system is modular and highly configurable, requiring a 
small physical, CPU and memory footprint. 


The Revenant appliance platform provides a base set of services and functions as an operating 
environment for many security conscious network based applications. The Appliance provides 
built-in IPSec encryption, SSHv2 Secure Remote Management, text based management and 
power-off safe operation. 


Basic Management and upkeep of Revenant 


System Life-Cycle comprises: 


. Security Patch updates 

. System and Application updates 

. System health-check and maintenance 
. System Security Integrity maintenance 


Revenant embodies an imbedded, appliance architecture with a strong bias towards encryption, 
out-of-band authentication and other network applications. 


Two primary products have been designed at this point, with expansion into additional modules 
planned for the future. 
. Revenant Encrypted Private Network Gateway 
° The Revenant EPN Gateway provides a platform for performing IPSec encryption in 
several configurations: 
1) Network-to-Network 
2) Host-to-Network 
3) Host-to-Host 
4) Revenant IDS 
, The Revenant application is also capable of providing a platform for an IDS sensor. 


The Revenant appliance platform provides a base set of services and functions as an operating 
environment for many security conscious network based applications. The Appliance provides 
built-in IPSec encryption, SSHv2 Secure Remote Management, Text based management and 
power-off safe operation 
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The Revenant appliance has been built with size, performance and security as primary goals, and 
as a result of this, the system does not run any network accessible processes except those ° 
required by specifically installed modules. 


The Revenant platform offers no intrinsic network access paths, and is not accessible on the 
network unless one of the network modules has been installed. The Revenant system does not 
load any network accessible functionality except as required by the appliance modules loaded in 
any specific configuration. 


The Revenant Measurement appliance is an “Out-of-Band” strong authentication and connection 
gateway system. Measurement is an access concentrator, which performs strong authentication 
of user requests. In a security conscious environment, the Measurement allows an organization to 
effectively provide wide-ranging access to systems or services through a single, secure access 
path. 


The Revenant appliance is a perfect platform for Measurement services due to the security 
functions and services built into the base system. 


1.1 Related Work and our contributions 

This project involves the creation of a SCADA targeted filter. This filter will act as a security 
gateway allowing users to access legacy systems that do not support modern encrypted protocols 
to do so whist not having to interfere with the existing system. At the same time, advanced 
threats and Malware (such as STUXNET) will be isolated from the systems using a bridged 
firewall layer. This system will in itself be isolated and resilient and be capable of reliable action 
when power and other failures occur. It will collate and report attacks seamlessly allowing 
Internet connected management and monitoring systems to co-exist on treacherous networks in a 
cloud environment. 


Technical Approach 
A PCap module written in R and C that can take direct network feeds (TCP/IP) and report on 
anomalous traffic (with a learning feature and feedback cycle to minimize error with use) will be 
developed with the appliance. 


This work and research follows and continues that published as: 
Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 


Embedded Software, Proceedings of the 8th Australian Information Security Management 
Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 
Charles Sturt University 
http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 

and 
Wright, Craig S. (2010) Software, Vendors and Reputation: an analysis of the dilemma in 
creating secure software, Proceedings of InTrust 2010 The Second International 
Conference on Trusted Systems 13th — 15th December 2010 Beijing, P. R. China 
Charles Sturt University 
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and (forthcoming) 
7 Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 
of Testing Software Bugs, Proceedings of 4th International Conference on Computational 
Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 
Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 
Alternative: Negative Externalities and the Selection of Security Controls, CISIS 2011 
June 8-10th, 2011 


Personnel and Performer Qualifications and Experience 
Craig S Wright (Full CV too long and is available in request) 


Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 
risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 
Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 


Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanovsky, CIF1, CISM, REM, CIPS, Infracritical, Inc. 

Principle, SCADA expert and Author 

(chapter author) of "Corporate Hacking and Technology-driven Crime: Social Dynamics and URL: 
http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime-Implications/dp/16 16928050 


URL: http://www. infracritical.com/papers/scadasec-20 1 0-review.zip 

URL: http://www.amazon.co.uk/Critical-Infrastructure-Homeland-Emergency- 
Preparedness/dp/1420095277 

URL: http://viewer.zmags.com/publication/d1408139#/d1 408139/12 

URL: http://www.amazon.com/Transportation-Systems-Security-A llan-McDougall/dp/1420063782 


Commercialization Capabilities and Plan 


The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 
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Costs, Work, and Schedule 
B Amount Requested (in dollars): $1,800,000.00 
Duration: 36 months 
The funding request will provide full scholarships and positions for two (2) PhD candidates to 
aide in the research and investigation of security issues and solution, the creation of software and 
IDS tools in this field. The period is set to three years which includes the completion of the PhD 
projects and the creation of the appliance and related open source software. 


° PhD Funding $240,000 
° Supervision $180,000 
° Survey and data Analysis $120,000 
. Administration $120,000 
. Core Systems $220,000 
. Marketing of system and test use $100,000 
. Software coding $340,000 
° Electronics and System $480,000 
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Offeror Name: W&K INFO DEFENSE RESEARCH LLC 


SCADA Isolation 
07/04/2010 


Title 
Date: 


Proposed Technical Approach: 
This project will provide a low cost, high 
availability and security SCADA security solution 
through: 
System inventory management 
Firewall 
Anti-virus / anti-malware 
Forensic network capture 
IP property protection and 
extrusion reporting 
Risk quantification 
Advanced traffic filtering and data 
capture 
The idea to be patented — advanced 
IDS / honeypot 


Craig Wright 


Cig bMh 


Authorized Representative: 


Signature: 
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Operational Capability: 

The project test, develop and test a set of software 
and hardware solutions developed to minimize 
attacks again SCADA systems. 


Schedule, Cost, Deliverables, & Contact Info: 
This project involves the creation of aSCADA 
targeted filter. This filter will act as a security 
gateway allowing users to access legacy systems 
that do not support modern encrypted protocols to 
do so whist not having to interfere with the existing 
system. At the same time, advanced threats and 
Malware (such as STUXNET) will be isolated from 
the systems using a bridged firewall layer. This 
system will in itself be isolated and resilient and be 
capable of reliable action when power and other 
failures occur. It will collate and report attacks 
seamlessly allowing Internet connected 
management and monitoring systems to co-exist on 
treacherous networks in a cloud environment. 


Deliverables: 

5-10 published papers 

2 PhD Thesis' in the field 

A commercial appliance 

A TCPDump filter program 
Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 

Phone: 5613108801 

Email: dave@davekleiman.com 





Proposal White Paper 


BAA number, + 

Title of proposal; 
Name of offeror 
Administrative Contact: 
Company Name: 





Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 

Technical Contact: 
Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
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(Type 1) 


BAA 11-02-TTA 09-0049-WP 


~ Risk Quantification 


W&K INFO DEFENSE RESEARCH LLC 
Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 

5613108801 

NA 

274997114 

Craig Wright 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
+61 2 4362 1512 
NA 

274997114 


Owned Enterprise and a Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 
Business Type: 
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$2,200,000.00 
36 months 
07/04/2011 
Small Business 
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Executive Summary 

Using empirical evidence, this research aims to investigate and quantify the root cause of 

security flaws that act as a source of system compromise. Research into the effects of poor 

system design, market based risk solutions based on derivative instruments and the impact of 
common system misconfigurations will be incorporated into multivariate survival models. This 
research incorporates the economic impact of various decisions as a means of determining the 
optimal distribution of costs and liability when applied to information security and in particular 
when assigning costs in computer system security and reliability engineering. 

The objective of this research is to produce an innovative modelling architecture designed 

around information systems security and risk based reliability and survivability analysis. The 

objectives of the research are: 

(1) To address the critical limitations (Jeanblanc & Valchev, 2005) that are associated with 
reliability engineering in regards to computer systems. This will be completed with 
competing risks analysis and multivariate survival analysis coupled with a game theoretic 
approach. Data collected from an analysis of systems in the field will be used to test 
assumptions. These assumptions (Marti, 2008) include: 


a. constant and homogenous failure rates, 
b. binary failure and univariate reliability, 
c. censoring of failure data, and 

d. independent failures. 

(2) To produce a methodology for the creation and testing of hazard and survival models for 
information systems. This will become a risk based quantitative approach to reliability and 
survivability engineering. 

(3) To incorporate methods that represent the effects of misaligned incentives and their 
consequence to security controls. 


To do this, it is necessary to recognise that information security is a risk function (Anderson, 
Longley & Kwok, 1994). Paying for too much security can be more damaging in economic terms 
than not buying enough. This leads to decisions about where the optimal expenditure on damage 
prevention should lie. This research will investigate who should be responsible for the security 
failures that are affecting the economy and society and how can this be maximized in order to 
minimize negative externalities (Cohen, 1976). The conclusions will be presented using an 
empirical study of software hazard rates and audit failures along with the question of how to 
enforce liability in a global economy. 


The research is intended to address some of the economic issues that are arising due to an 
inability of assign risk correctly, a failure to measure risk as well as looking at the misalignment 
of information systems audit and the compliance regime. The externalities that restrict the 
development of secure software and how the failure of the end user to apply controls makes it 
less probable that a software vendor will enforce stricter programming controls with failures in 
the audit and measurement processes are addressed. This includes a look at the misalignment of 
audit to security. This misalignment is demonstrated to result from the drawing of funds from 
security in order to provide compliance with little true economic gain (Wright, 2010). 


The introduction of Game Theory and Behavioural Economics (Anderson, 2001; Anderson, & 
Moore, 2006; Varian, 2004) have created a foundation for the rationalisation of information 
security processes which lead to improved allocation of economic resources. The optimal 
distribution of economic resources across risk allocations in information system can only lead to 
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a combination of more secure systems for a lower overall cost. This research will incorporate the 
game theoretic multi-player decision problem. Agents in the model will be deemed to be rational 
with well-defined preferences, include the ability to reason strategically using their knowledge 
and belief of other players and to act according to a combination of both economic "first 
thought" and deep strategic thinking (Nissan, et. al., 2007). Solutions to these models will be 
sought through a combination of the following game devices: 


e Equilibrium: evolutive (steady state) games 

e Heterogeneous sequential games 

e Rationalisability: deductive reasoning 
The models will detail the existence of strictly dominating games where these exist in 
information security practices and propose methods to improve these models. Existing 
information security practices in existing organisations will be classified into the following game 
types: 

e Non-cooperative vs. cooperative game 

e Strategic vs. extensive game 

e Perfect vs. imperfect information 
Bounded rationality, behavioural game aspects and other feedback effects will be investigated 
(Nissan, et. al., 2007). Social capital based on fairness and reciprocity will be defined as it 
applies to the economically efficient application of risk processes associated with Information 
systems. Contract Theory will be used to explain the creation of agreements and “contracts” in 
the presence of information asymmetry. This is approached through the combination of adverse 
selection, moral hazards and the “signalling game”. In this, adverse selection is defined as the 
“Principal not having been informed of the other agent's private information ex-ante” such as in 
George Akerlof’s “Market for lemons” (1970). This application of game theory has been asserted 
to explain many aspects of the software industries predisposition to create insecure software 
(Anderson, 2001). Arora, Telang and Xu (2004) asserted that a market-based mechanism for 
software vulnerabilities would necessarily underperform a CERT-type mechanism. The market 
that they used was a game theoretic pricing game. In the model reported, the players in the 
market do not report their prices’. These players use a model where information is distributed 
simultaneously to the client of the player and the vendor. The CERT model was touted as being 
the most favourable solution. The research will demonstrate that the examined "market" model is 
in itself sub-optimal. It both creates incentives to leak information without proper safeguards and 
creates vulnerability black-markets that rely on waiting until a patch was publically released and 
only then releasing the patch to the public. This ignores many externalities and assumes the only 
control is a patch in place of other alternative compensating controls. It is to be demonstrated 
that there are flaws with this approach that can be solved through the creation of a security and 
risk derivative market for software. The user would have an upfront estimate of the costs and this 
could be forced back to the software vendor. Where the derivative costs more than testing, the 
vendor would conduct more in-depth testing and reduce the levels of bugs (Bacon et. al. 2009). 


1.2 Our contribution and Technical Approach 


We intend to present an analysis using empirical studies to determine and model the cost of 
finding, testing and fixing security vulnerabilities. The goal of this research project is to create a 
series of quantitative models for information security. Mathematical modelling techniques that 


' E.g., iDefense Ltd. and other similar providers have a semi-closed market with limited information exchange. 
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can be used to model and predict information security risk will be developed using a 
combination of techniques including: 


Economic theory, and Econometrics 
Quantitative financial modelling, 
Behavioural Economics, 
Algorithmic game theory and 

e Statistical hazard/survival models. 
The models will account for heteroscedastic confounding variables and include appropriate 
transforms such that variance heterogeneity is assured in non-normal distributions. Process 
modelling for integrated Poisson continuous-time process for risk through hazard will be 
developed using a combination of: 


Business financial] data (company accountancy and other records), 

Anti-Virus Industry data 

Legal databases for tortuous and regulatory costs and 

Insurance datasets. 

This data will be coupled with hazard models created and validated using Honeynets (e.g. Project 
Honeynet), reporting sites such as the Internet Storm Centre and iDefence. The combination of 
this information will provide the framework for a truly quantitative security risk framework”. At 
present, the DShield storm centre receives logging from over 600,000 organisations. This 
represents a larger quantity of data than is used for actuarial] data in the home insurance industry. 
The problem being that this information is not collated or analysed in any quantitatively sound 
manner. This research will model survival times for types of applications using the body of 
research into quantitative code analysis for risk. The research will create a series of models (such 
as those used within mechanical engineering, material science etc) for Information Risk. 


Some of the methods that are planned testing in the creation of the risk framework will include: 


Random forest clustering, 

K-means analysis, 

Other classification algorithms, and 

Network associative maps in text analysis forensic work. 


The correlation of reference data (such as IP and functional analysis data) between C&C 
(Command and Control) systems used in “botnets” is one aspect of this research. Starting from 
the outside (the cloud and perimeter) and working inwards to the network, the risk model would 
start by assessing external threats and move into internal threat sources, becoming gradually 
become more and more granular as one moves from network to individual hosts and finally to 
people (user behaviour (Varian, 2004)) and application modelling (Guo, Jarrow, & Zeng, 2005). 
The eventual result will be the creation of a model that can incorporate the type of organisation, 
size, location, application, systems used, and the user awareness levels to create a truly 
quantitative risk mode]. This would be reported with SE (standard error) and confidence level 
rather than a point estimate. Code to import data from hosts and networks, using raw “pcap 
traces”? will be developed such that system statistics and other data can be collated into a 
standardised format. This code will be developed in “R” and “C++”. This will enable the 


? Support has been sought and received from SANS (including DShield), CIS (Centre for Internet Security) and the 
Honeynet project. 
> Pcap is a packet capture standard supported by both open source and commercial network capture equipment. 
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creation and release of actuarial threat risk models that incorporate heterogeneous tendencies in 
. variance across multidimensional determinants while maintaining parsimony. | foresee a 
combination of Heteroscedastic predictors (GARCH/ARIMA etc) coupled with non-parametric 
survival models. 1 expect that this will result in a model where the underlying hazard rate (rather 
than survival time) is a function of the independent variables (covariates). Cox's Proportional 
Hazard Model with Time-Dependent Covariates would be a starting point, going to non- 
parametric methods if necessary. The end goal will be to create a framework and possibly a 
program that can assess data stream based on a number of dependant variables (Threat models, 
system survival etc) and covariates and return a quantified risk forecast and standard error. 
Utility to Department of Homeland Security 
When a system fails, it often can fai] in numerous ways with several causes for the failure 
(Crowder 2001). Censored observation management can be considered the principal factor 
influencing survival analysis. Survival analysis and has developed rigorous procedures and 
methods effective for the treatment of censored data based on probability theory, asymptotic 
counting and stochastic process as well as the Martingale central limit theorem. References to the 
univariate analysis of survival is found in Cox (1972), Cox and Oakes (1984), Fleming and 
Harrington (1991), Andersen et al (1993), Kalbfleisch and Prentice (1980, 2002), Klein and 
Moeschberger (2003), Ibrahim et al. (2005), Lawless (1982, 2003), Ma and Krings (2008). 


Modeling risk allows it to be measured and controlled. 
This work and research follows and continues: 
Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 


Embedded Software, Proceedings of the 8th Australian Information Security Management 
Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 


Charles Sturt University 
http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 


and (forthcoming) 
Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 
of Testing Software Bugs, Proceedings of 4th International Conference on Computational 
Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 


Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 
Alternative: Negative Externalities and the Selection of Security Controls, Proceedings of 
4th International Conference on Computational Intelligence in Security for Information 
Systems CISIS 2011 June 8-10th, 2011 
Personnel and Performer Qualifications and Experience 
Craig S Wright (Full CV too long and is available in request) 
Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 
risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 
Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
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New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 


Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanoysky, CIFI, CISM, REM, CIPS, Infracritical, Inc. 
Principle, SCADA expert and Author 


URL: http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime- 
Implications/dp/1616928050 


URL: http://www. infracritical.com/papers/scadasec-2010-review.zip 


URL: http://www.amazon.co.uk/Critical-Infrastructure-Homeland-Emergency- 
Preparedness/dp/1420095277 


URL: http://viewer.zmags.com/publication/d 1408 139#/d1408 139/12 
URL: http://www.amazon.com/Transportation-Systems-Security-Allan-McDougall/dp/ 1420063782 
Commercialization Capabilities and Plan 
The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 
Costs, Work, and Schedule 
Amount Requested (in dollars): $2,200,000.00 
Duration: 36 months 
The funding request will provide full scholarships and positions for three (3) PhD candidates to 
aide in the research and investigation of software security issues and solution, the creation of 
economic models and the publication of an expected 20-30 papers in this field. 
The period is set to three years which includes the completion of the PhD projects and the 
creation of the market, insurance and derivative models. 


: PhD Funding $480,000 
. Supervision $350,000 
° Survey and data Analysis $230,000 
. Research Fellowships (2) $260,000 
. Administration $120,000 
. Costs (Computational Systems) $660,000 
‘ Support Costs (Coding) $300,000 
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BAA Number: BAA 11-02-TTA 01-0127-WP 
Offeror Name: W&K INFO DEFENSE RESEARCH LLC 


Title Risk Quantification 
Date: _ 07/04/2010 
Operational Capability: 


The research is intended to address some of the economic issues that are arising due to an inability 
of assign risk correctly, a failure to measure risk as well as looking at the misalignment of 
information systems audit and the compliance regime. The externalities that restrict the 
development of secure software and how the failure of the end user to apply controls makes it less 
probable that a software vendor will enforce stricter programming controls with failures in the 
audit and measurement processes are addressed. This includes a look at the misalignment of audit 
to security. This misalignment is demonstrated to result from the drawing of funds from security 
in order to provide compliance with little true economic gain (Wright, 2010). 


Proposed Technical Approach: 

The objective of this research is to produce an 
innovative modeling architecture designed 
around information systems security and risk 
based reliability and survivability analysis. The 
objectives of the research are: 


(1) To address the critical limitations 
(Jeanblanc & Valchev, 2005) that are associated 
with reliability engineering in regards to 
computer systems. This will be completed with 
competing risks analysis and multivariate 
survival analysis coupled with a game theoretic 
approach. Data collected from an analysis of 
systems in the field will be used to test 
assumptions. These assumptions (Marti, 2008) 
include: 

constant and homogenous failure rates, 
binary failure and univariate reliability, 
; censoring of failure data, and 

d independent failures. 


(2) To produce a methodology for the 
creation and testing of hazard and survival 
models for information systems. This will 
become a risk based quantitative approach to 
reliability and survivability engineering. 

(3) To incorporate methods that represent 
the effects of misaligned incentives and their 
consequence to security controls. 


Craig Wright 


Cb: 


Authorized Representative: 
Signature: 
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Schedule, Cost, Deliverables, & Contact Info: 
Deliverables: 

30-40 published papers 

3 PhD Thesis' in the field 

A commercial model for modeling information risk 


Several published papers have been released 
(forthcoming include) 


Wright, Craig S. and Zia, Tanveer A (2011) A 
Quantitative Analysis into the Economics of Testing 
Software Bugs, Proceedings of CISIS 2011 June 8- 
10th, 2011 


Wright, Craig S. and Zia, Tanveer A (2011) A 
Rationally Opting for the Insecure Alternative: 
Negative Externalities and the Selection of Security 
Controls, Proceedings of CISIS 2011, 2011 


Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 

Phone: 5613108801 

Email: dave@davekleiman.com 
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Proposal White Paper 


BAA number, * 





Title of proposal; 


Name of offeror 
Administrative Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


Technical Contact: 


Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 


(Type I) 


BAA 11-02-TTA 01-0127-WP 

Software Assurance through Economic Measures 
W&K INFO DEFENSE RESEARCH LLC 

Dave Kleiman 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
5613108801 

NA 

274997114 


Craig Wright 


W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 


Palm Beach 

FL 33410 - 6253 
+61 2 4362 1512 
NA 

274997114 


W&K INFO DEFENSE RESEARCH LLC is a Joint Venture Company between a US Vet. 
Owned Enterprise and an Australian Research Company. 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 


Business Type: 
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$650000.00 
36 months 
07/04/2011 


Small! Business 
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Executive Summary 


The deficiency of published quantitative data on software development and systems design has 
been a major ground for software engineering’s failure to ascertain a proper scientific 
foundation. Past studies into coding practice have focused on software vendors. These _ 
developers have many distinctions from in-house projects that are not incorporated into the 
practices and do not align well with in-house corporate code development. In the past, building 
software was the only option but as the industry developed, the build vs. buy argument has 
swung back towards in-house development with the uptake of Internet connected systems. In 
general, this has been targeted towards specialized web databases and online systems with office 
systems and mainstream commercial applications becoming a ‘buy’ decision. 


As companies move more and more to using the web and as ‘cloud applications’ become 
accepted, in-house development is becoming more common. This paper uses an empirical study 
of in-house software coding practices in Australian companies to both demonstrate that there is 
an economic limit to how far testing should proceed as well as noting the deficiencies in the 
existing approaches. 


1.1 Related Work 


Other studies of coding processes and reliability have been conducted over the last few decades. 
The majority of these have been based either on studies of large systems and mainframe based 
operations or have analyzed software vendors. In the few cases where coding practices within 
individual organization have been quantitatively analyzed, the organizations have been nearly 
always large telecommunications firms or have focused on SCADA and other critical system 
providers. 


Whilst these results are extremely valuable, they fail to reflect the state of affairs within the vast 
majority of organizations. With far more small to medium businesses coupled with 
comparatively few large organizations with highly focused and dedicated large scale 
development teams (as can be found in any software vendor), an analysis of in-house practice is 
critical to both security and the economics of in-house coding. 


As the Internet becomes all persuasive, internal coding functions are only likely to become more 
prevalent and hence more crucial to the security of the organization. 


1.2 Our contribution 

We intend to present an analysis using empirical studies to determine and model the cost of 
finding, testing and fixing software bugs. We model the discovery of bugs or vulnerabilities in 
using quantitative functions and calculate the defect rate per SLOC (source line of codes) using 
Bayesian calculations. 

The end solution to the limited and sub-optimal markets that currently exist would be the 


creation of Hedge funds for software security. Sales in software security based derivatives could 
be created on forward contracts. One such solution is the issuing of paired contracts (such as 
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exist in short sales of stocks ). The first contract would be taken by a user and would pay a fixed 
amount if the software has suffered from any unmitigated vulnerabilities on the (forward) date 
specified in the contract. The paired contract would cover the vendor. If the vendor creates 
software without flaws (or at least mitigates all easily determinable flaws prior to the inception 
of the contract) the contract pays them the same amount as the first contract. 


This is in effect a 'bet' that the software will perform effectively. Ifa bug is discovered, the user 
is paid a predetermined amount. This amount can be determined by the user to cover the 
expected costs of patching and any consequential damages (if so desired). This allows the user to 
select their own risk position by purchasing more or less risk as suits both the risk tolerance and 
the nature of the user's systems. 


Such a derivative (ifan open market is allowed to exist) would indicate the consensus opinion as 
to the security of the software and the reputation of the vendor. Such an instrument would allow 
software vendors and users to hedge the risks faced by undiscovered software vulnerabilities. 
These instruments would also be in the interest of the software vendor's investors as the ability to 
manage risk in advance would allow for forward financial planning and limit the negative impact 
that vulnerability discovery has on the quoted prices of a vendors capital. 


This project will model the security of software coding practices in a manner that will lead to 
fewer economic externalities 


Utility to Department of Homeland Security 


The game theoretic approach to this can be modeled looking at the incentives of the business and 
programming functions in the organization. Programmers are optimists. As Brooks noted, "the 
first assumption that underlies the scheduling of systems programming is that all will go well". 
Testing is rarely considered by the normal programmer as this would imply failure. However, the 
human inability to create perfection leads to the introductions of flaws at each stage of 
development. 


Technical Approach 


Just as car dealers buff the exterior and detail the upholstery of a used car, neglecting the work 
that should be done on the engine, software vendors add features. Most users are unlikely to use 
even a small fraction of these features, yet they buy the product that offers more features over the 
more secure product with fewer features. The issue here is that users buy the features over 
security. This is a less expensive option for the vendor to implement and provide. 


The creation of a security and risk derivative should change this. The user would have an upfront 
estimate of the costs and this could be forced back to the software vendor. Where the derivative 
costs more than testing, the vendor would conduct more in-depth testing and reduce the levels of 
bugs. This would most likely lead to product differentiation (as occurred in the past with 
Windows 95/Windows NT). Those businesses who wish to pay for security could receive it. 
Those wanting features would get what they asked for. 
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It is argued that software developers characteristically do not correct all the security 
vulnerabilities and that known ones remain in the product after release. Whether this is due to a 
lack of resources or other reasons, this is unlikely to be the norm and would be rectified by the 
market. The cost of vendors in share price and reputational losses exceed the perceived gains 
from technical reasons where the fix might break existing applications. The application is already 
broken in the instance of a security vulnerability. 


Users could still run older versions of software and have few, if any, bugs. The issue is that they 
would also gain no new features. It is clear that users want features. They could also choose to 
use only secure software, but the costs of doing so far outweigh the benefits and do not provide a 
guarantee against the security of a system being compromised. As such, the enforced legislation 
of security standards against software vendors is detrimental. A better approach would be to 
allow an open market based system where vendors can operate in reputational and derivative 
markets. 


At the end of any analysis, security is a risk function and what is most important is not the 
creation of perfectly security systems, but the correct allocation of scarce resources. Systems 
need to be created that allow the end user to determine their own acceptable level of risk based 
on good information. 


The goal of this research project is to create a series of quantitative models for information 
security that can be used to create a software security derivative and insurance market. 
Mathematical modeling techniques that can be used to model and predict information security 
risk will be developed using a combination of techniques including: 


° Economic theory, and Econometrics 
. Quantitative financial modeling, 

. Behavioral Economics, 

. Algorithmic game theory and 

. Statistical hazard/survival models. 


The models will account for heteroscedastic confounding variables and include appropriate 
transforms such that variance heterogeneity is assured in non-normal distributions. Process 
modeling for integrated Poisson continuous-time process for risk through hazard will be 
developed using a combination of: 


.- Business financial data (company accountancy and other records), 
° Anti-Virus Industry data 

. Legal databases for tortuous and regulatory costs and 

° Insurance datasets. 


This work and research follows and continues that published as: 


Wright, Craig S. and Zia, Tanveer A. (2010) The Economics of Developing Security 
Embedded Software, Proceedings of the 8th Australian Information Security Management 
Conference, Edith Cowan University, Perth Western Australia, 30th November 2010 
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Charles Sturt University 
http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1 101 &context=ism 
and 


Wright, Craig S. (2010) Software, Vendors and Reputation: an analysis of the dilemma in 
creating secure software, Proceedings of InTrust 2010 The Second International 
Conference on Trusted Systems 13th — 15th December 2010 Beijing, P. R. China 


Charles Sturt University 
and (forthcoming) 


Wright, Craig S. and Zia, Tanveer A (2011) A Quantitative Analysis into the Economics 
of Testing Software Bugs, Proceedings of 4th International Conference on Computational 
Intelligence in Security for Information Systems CISIS 2011 June 8-10th, 2011 


Wright, Craig S. and Zia, Tanveer A (2011) A Rationally Opting for the Insecure 
Alternative: Negative Externalities and the Selection of Security Controls, Proceedings of 
4th International Conference on Computational Intelligence in Security for Information 
Systems CISIS 2011 June 8-10th, 2011 


Personnel and Performer Qualifications and Experience 
Craig S Wright (Full CV too long and is available in request) 


Over the years Craig has personally conducted and managed in excess of 1,600 IT security related 
engagements for more than 180 Australian and international organizations in both the private and 
government sectors. As a strong believer in life-long learning, Craig has qualifications in Law, IT, 
Mathematics and Business. However, his driving focus is research and development in the security and 
risk arena. He is the first person to have obtained multiple GSE certifications (Malware and Compliance) 
Craig designed the architecture for the world’s first online casino (Lasseter’s Online) in the Northern 
Territory; as well he has, in the past, designed and managed the implementation of many of the systems 
that protect the Australian Stock Exchange. To add to these accomplishments he has authored IT security 
related books and articles as well as designed a new university program for Charles Sturt University in 
New South Wales, Australia which will offer a Master in Digital Forensics. This program commenced in 
2010 and be offered as an on campus and distance education program. 


Dave Kleiman (http://en.wikipedia.org/wiki/Dave_Kleiman) 


Dave Kleiman is a noted Forensic Computer Investigator, an author/coauthor of multiple books and a 
noted speaker at security related events 


Bob Radvanovsky, CIFI, CISM, REM, CIPS, Infracritical, Inc. 

Principle, SCADA expert and Author 

(chapter author) of "Corporate Hacking and Technology-driven Crime: Social Dynamics and 
Implication", ISBN 1616928050 and 9781616928056, Information Science Publishing, July 2010. 
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URL: http://www.amazon.com/Corporate-Hacking-Technology-driven-Crime- 
Implications/dp/1616928050 


"Challenges Faced by the SCADASEC Mailing List", Protecting Canada's Critical Infrastructure 2010 
Control Systems Security Workshop, sponsored by Royal Canadian Mounted Police (Ontario 
Technological Crime), Public Safety Canada and Emergency Management Ontario (Critical Infrastructure 
Assurance Program), Wednesday April 14, 2010 and Thursday, April 15, 2010. 

URL: http://www. infracritical.com/papers/scadasec-20 1 0-review.zip 

Author of "Critical Infrastructure: Homeland Security and Emergency Preparedness", Second Edition, 
ISBN 1420095277 and 9781420095272, Taylor & Francis CRC Press, December 2009. 

URL: http://www.amazon.co.uk/Critical-Infrastructure-Homeland-Emergency- 
Preparedness/dp/1420095277 

Contributor (introduction speaker) of “The Year in Homeland Security”, 2008/2009 Edition (Charles 
Oldham, editor director), Faircount Media Group. 

URL: http://viewer.zmags.com/publication/d] 408 139#/d1408 139/12 

Author (co-author) of "Transportation Systems Security", ISBN 1420063782 and 9781420063783, Taylor 


and Francis CRC Press, May 2008. 
URL: http://www.amazon.com/Transportation-Systems-Security-A]lan-McDougall/dp/ 1420063782 


Commercialization Capabilities and Plan 


The principles are experienced researchers and businessmen in the realm of Information 
Security. The research will be conducted in conjunction with Charles Sturt University and will 
follow the standard commercialization processes of the University (these processes are available 
online). Further, this project will create a large body of public and academic knowledge and 
scientific research that could also be used by other companies and Universities in the creation of 
further models and structures that will lead to the securing of more systems again. 


Costs, Work, and Schedule 
Amount Requested (in dollars): $650,000.00 


Duration: 36 months 


The funding request will provide full scholarships and positions for three (3) PhD candidates to 
aide in the research and investigation of software security issues and solution, the creation of 
economic models and the publication of an expected 20-30 papers in this field. 


The period is set to three years which includes the completion of the PhD projects and the 
creation of the market, insurance and derivative models. 


° PhD Funding $240,000 
. Supervision $180,000 
. Survey and data Analysis $230,000 
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P BAA Number: BAA 11-02-TTA 01-0127-WP 
Offeror Name: W&K INFO DEFENSE RESEARCH LLC 
Title Software Assurance through Economic Measures 


Date: 07/04/2010 


Proposed Technical Approach: 
This project will address and provide measures and 
The analysis will measure the following coding 
errors: 

Format string errors 

Integer Overflows 

Buffer overruns 

SQL Injection 

Cross-Site scripting 

Race Conditions 

° Command Injection. 

Several published papers have been released 
(forthcoming include) 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Quantitative Analysis into the 
Economics of Testing Software Bugs, 
Proceedings of 4th International 
Conference on Computational 
Intelligence in Security for Information 
Systems CISIS 2011 June 8-1 0th, 2011 


Wright, Craig S. and Zia, Tanveer A 
(2011) A Rationally Opting for the 
Insecure Alternative: Negative 
Externalities and the Selection of 
Security Controls, Proceedings of 4th 
International Conference on 
Computational] Intelligence in Security 
for Information Systems CISIS 2011 
June 8-10th, 2011 


Authorized Representative: Craig Wright 


Signature: 
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Operational Capability: 

The project will analyze a sample of at least 1,000 
coding projects using existing static analysis tools, 
manual code review and related techniques. Where 
these methods are lacking, proposals and methods 
to integrate existing methods and to fill the gaps 
left will be created. 

Schedule, Cost, Deliverables, & Contact Info: 
Provide any milestone decision points that will be 
required. Describe period of performance and total 
costs. Include the base performance period cost and 
length, and estimates of cost and lengths of 
possible option. 

Deliverables: 

20-30 published papers 

3 PhD Thesis’ in the field 

A commercial model for software derivatives and 
insurance markets 


A means to measure and predict the following 
coding errors is being developed 

Format string errors 

Integer Overflows 

Buffer overruns 

SQL Injection 

Cross-Site scripting 

Race Conditions 

Command Injection. 


Corporate Information: 

Dave Kleiman 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Blvd #314 

Palm Beach 

FL 33410 - 6253 


Phone: 5613108801 
Email: dave@davekleiman.com 


spb 
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S&T Directorate BAA Cover Sheet A 


Proposal Does Not Contain Proprietary Information 


Proposal Number: 
Topic: 

Proposal Title: 

Company Name: 

Mailing Address (Line 1): 
Mailing Address (Line 2): 
City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 

DUNS + 4: 

CAGE Code: 

SIC: 

FICE: 


Proposal Contains Proprietary 
Information: 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 
Business Type: 


BAA 11-02-TTA 14-0025-WP 

TTA 14 - Software Assurance MarketPlace (SWAMP) 
Software Derivative Markets & Information Security Risk 
W&K INFO DEFENSE RESEARCH LLC 

4371 Norhtlake Blvd #314 


Palm Beach 
FL 33410-6253 
5613108801 


274997114 
null - 


No 


$1200000.00 

36 months 

07/04/2011 

Small Business - 50 or Fewer Employees - Annual Gross Revenue - 1 Million or 


SS 
Small Business 


i in the Affidavit / 
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Proposal Number: 
Topic: 

Proposal Title: 

Company Name: 

Mailing Address (Line 1): 
Mailing Address (Line 2): 
City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 

DUNS + 4: 

CAGE Code: 

SIC: 

FICE: 


Proposal Contains Proprietary 
Information: 


Amount Requested (in dollars): 


Duration: 
Requested Starting Date: 
Business Type: 


Proposal Does Not Contain Proprietary Information 


BAA 11-02-TTA 09-0049-WP 

TTA 09 - Cyber Economics 

Risk Quantification 

W&K INFO DEFENSE RESEARCH LLC 
4371 Norhtlake Bivd #314 


Palm Beach 
FL 33410 - 6253 
5613108801 


274997114 
null - 


No 


$2200000.00 
36 months 
07/04/2011 
Small Business 


Small Business - 50 or Fewer Employees - Annual Gross Revenue - 1 Million or 


Less 
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Proposal Number: BAA 11-02-TTA 05-0155-WP 

Topic: TTA 05 - Secure, Resilient Systems and Networks 
Proposal Title: SCADA Isolation 

Company Name: W&K INFO DEFENSE RESEARCH LLC 
Mailing Address (Line 1): 4371 Norhtlake Blvd #314 

Mailing Address (Line 2): 

City: Palm Beach 

State & Zip Code: FL 33410 - 6253 

Phone: 5613108801 

Fax: 

TIN: 274997114 

DUNS + 4: null - 

CAGE Code: 

SIC: 

FICE: 

Proposal Contains Proprietary No 

Information: 

Amount Requested (in dollars): $1800000.00 

Duration: 36 months 

Requested Starting Date: 07/04/2011 

Business Type: Small Business - 50 or Fewer Employees - Annual Gross Revenue - 1 Million or 


ess 
Small Business 
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S&T Directorate BAA Cover Sheet A 


Proposal Does Not Contain Proprietary Information 


Proposal Number: 
Topic: 

Proposal Title: 
Company Name: 


Mailing Address (Line 1): 
Mailing Address (Line 2): 


City: 

State & Zip Code: 
Phone: 

Fax: 

TIN: 

DUNS + 4: 
CAGE Code: 
SIC: 

FICE: 


Proposal Contains Proprietary 


Information: 


Amount Requested (in dollars): 


Duration: 


Requested Starting Date: 


Business Type: 


BAA 11-02-TTA 01-0127-WP 

TTA 01 - Software Assurance 

Software Assurance through Economic Measures 
W&K INFO DEFENSE RESEARCH LLC 

4371 Norhtlake Bivd #314 


Palm Beach 
FL 33410 - 6253 
5613108801 


274997114 
null - 


No 


$650000.00 

36 months 
07/04/2011 
Small Business 


Small Business - 50 or Fewer Employees - Annual Gross Revenue - 1 Million or 


Less 
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The following is a response to the request by the ATO, ref. 1011685995901. 


Enterprise 


1. Income is on hold at present. The ATO has been auditing and reviewing the company 


following an initial question as to the allocation of GST that lead to a zero amount in 


payment overall. 


Income was based on an arrangement with a large multi-national form for the 


a. 
export of software and mathematical algorithms. 

b. The company plans to raise money and sell its IP and software. 

c. Todo this, it needs to get past the audit phase. 

d. Noincome is expected to when the ATO allows us to actually carry on a business. 

e. Basically, we are conducting research and developing capital in the hope that one 
day the auditing process will actually provide some feedback and we can go to 
market. This was in progress before the ATO started calling clients and placed this on 
hold. 

2. Australia 
3. 24x7 
4. International 

a. We have published malware papers and processes (peer reviewed) 

b. We have published statistical libraries 

c. These can be sold as .Net framework libraries. Large companies such as Microsoft, 


MacAfee and CA have interest in the IP, but we need to have cleared the audit 
before we can sell this. 


5. All contract — see 2010 tax return. 


a. 
b. 
(= 


Income is on hold to when we can sell 

Sales will not start until the audit is complete 

Sales had started before the ATO started contacting clients who then placed holds 
on the sales. 


6. All work is currently completed by directors and contractors. 
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Supplies 

1. Data warehousing 
a. Contracting 
b. Rental of office space 
c. Computer systems 
d. Software 
e. Previously Existing IP 

2. See folders. 
a. Q42010 has not been completed and hence is not included in this. 
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Capital Acquisitions 
Plant leasing and core tech. 


1. Transfer of developed code into the company. 
a. COCOMO used to cost technology. 


2. Leasing of systems for the following 12 months. 
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3,226,297 


| : 
J 
, 





The IP has been deducted at a rate of 3 years as this is the perceived life of the IP before patient. 


Total Price 

(Discounted @ three payments of S636.000) 
Price Per Line 

Lines Per Day/Person 


This is at $666,666 as 1/3” of the total costs to date. 
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Evidence 
2 See contract — copy on disk 


Capital Value 
Direct costs plus IP 


Valuation 
CoCOMO |! based methodology plus direct costs. 


Use in the Enterprise 
The systems and equipment are used directly in the research and the development of solutions that 
will be offered for international sale. 


This Research is directly linked to a PhD candidacy at Charles Sturt University and is related to a 
CRiCS research study. 


The PhD proposal and associated research papers are available on request. 
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Other Acquisitions 
* Non-capital acquisitions for the period 01/01/2010 to 31/21/2010 as per purchase schedule. This 
includes Carbon credits (to offset computers using electricity) and sundry expenses. 
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2018 Income Tax Return 
4 Invoices — see disk 


Payments — see disk 


Loans 
— see disk 


The following loan contracts have been attached (as prepared by Michie Shehadie and Co and 
registered). 


Loan from Lynn Wright 
Loan from Craig Wright 


Other Loans (Visa and sundry expenses) 


Current Assets and Liabilities 
See MYOB File on disk. 


This includes depreciating assets. 


These assets are used in the research projects and are key to the development of product. 
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Intellectual Property 
Acquisition ~ how 
2 R& D intellectual property sold by Craig Wright to Integyrs Pty Ltd 


e You have valued the market value of your intellectual property as 
$2,246,000 (data from your BAS (Craig Wright) for the tax periods July - 
Dec 2009) which you sold to two of your companies where you are the 
Director. 


e You have to provide documents to substantiate that you have incurred 
these costs during the course of your research and development of your 
intellectual property. 


e Please provide substantiation of the above costs by providing the tax 
invoices with full details of the supplier, date, description and the amounts 
stated for the purchases. 


Sale of Capital Assets to Integyrs Pty Ltd 95 137 033 535 
Transfer of code, designs and assets from CSW to Integyrs as of June 30, 2009. 
Contracts created by Mitchie Shehadie and Co. 


| have attached these documents on the disk and with each sale contract. This inciudes a schedule as 
what IP was transferred. 


| have attached a spreadsheet with the breakdowns of loans by Lynn Wright for total for a 7% 
interest rate. The total comes to $815,803.61 as of 01 Jul 2009. 


The amounts are covered as follows in the spreadsheet under the following headers: 
Conferences and Travel 
Lynn paid monies for my attendance at conferences 
These where for my business and education (e.g. SANS) 
Monthly Contributions 
Lynn helped me pay the loans used for the legal costs. 


As per the attached information in the attached email, as per ‘Farrugia v The 
Official Receiver (1982) 43 ALR 700’ The Doctrine of Exoneration is used in the allocation of these 
when applied to real property. The loans where for the direct purpose of Integyrs and Research at 
Lynn’s detriment. These amounts are monies she paid towards the loan each month and are hence 
loaned to the company. 


Debt - Purchased contract 


DeMorgan Pty Ltd had a contract for $105,000 pa in payments to Lynn on sale. 
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| purchased this in order to by the business of DeMorgan and start DeMorgan 
Information Security Systems P/L and this contract and the IP associated with it was transferred into 
Integyrs. 


Valuation 
CoCOMO II for software 


Cost basis and transfer for prior assets. 


Assets and shares moved from prior companies set as per court order issued by NSW Supreme court. 


Supplier Agreements 


Sale of Capital Assets to Integyrs Pty Ltd 
Transfer of code, designs and assets from CSW to Integyrs as of June 30, 2009. 
$1,100,000 
Transfer of code, designs and assets from CSW to Integyrs as of June 30, 2009. 


$1,100,000 


Associated IP as maintined following ~ Liquidation of DeMorgan Information Security Systems Pty 
Ltd and kept due to unpaid debt. 


Shares and debt S 2,178,000 


As determined by NSW Supreme Court. 


Losses — Depreciation of capita! Assets (Write-off} 


Old Computer Equipment $22287 


Total Gains $2,235,000 


Total Losses $34,713 
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From: jamie.wilson@hotwirepe.com 

Sent: Sunday, August 11. 2013 9:47 PM 

To: jamie.wilson@hotwirepe.com; ramona.watts@hotwirepe.com, craig. wright@hotwirepe.com 
Subject: Projects - To plan 


Importance: High 


| will call today to discuss 





These are things for us to start: 
Research and Development Agency 


http://www. ausindustry.gov.au/programs/innovation-rd/RD-Taxincentive/Forms/Pages/ApplicationForRegistrationAsAResearchServiceProvider.aspx 








We need to decide on Coin-Exch or HotwirePE and register. 
This is for other work. 
Bitcoin 


ForEx (Foreign Exchange Project) 

YDF based Bitcoin wallet 

Bitcoin Hedge and Arbitrage system 

Bitcoin Trading Platform (Such as Bloomberg was) 

Mobile wallet (Wallet in YDF but we have a secure web interface) 
Currency escrow (for sales and trade — also contracted services) 
Bitcoin PayWave card 


oooooo0o90 


Training Engine 


o Patent 

o Adaptive Learning System 

o Network Cohorts 

o Mind Mapping and Search System 

o Course publishing system 

o Course rating system (See Spotify and/or Netflix) 

Agreements for content underway with publishers (Subscriptions) 
Video system (See project below) 

Misc. — recording studio 


ooo 


Reputation System 


© Think Linked in — but with tracking against training 
o Employment and job trading 

o Micro payments 

o Job validation and completion system 


Video System 


o Areplacement for Adobe and Goto Meeting 
o Record lectures — all web based 
o Mobile as well as desktop 


Business Systems 


o Like Harvest / Tax software — Merged (Expense and time tracking) 

o Sales 

o Driving logs (and tax recording — simplified) 

o Reporting and financials tracking 

o Risk System (See Below) 

o Intime-—this can become a suite of managed systems (even the desktop as a service) 


Risk Engine 
o Simple drop and drag risk platform 


o Project calculations 
o Monte Carlo Sim and Heteroscadestic 


CONFIDENTIAL DEF_00043726 
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o Set of algorithms — linked to training — no need to do maths 
Security Project 


o Next Gen Diversion system (Firewall/IDS) 
© Big Data Intelligence tracking system 
o IP and system mapping (To application engine) 


Internal Systems 


o Email/Collaboration etc. (MS Exchange) 
SVN system 

File system, Windows Domains 

NAP 

Etc. 


ooo;$o 


Let me know if there are any early projects we need to add to the list. 
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From: Craig S Wright 

Sent: Tuesday, July 2, 2013 11:07 PM 
To: Jamie Wilson; Ramona Watts 
Subject: Initial Accounts 
Attachments: Accounts _all.pdf; Balance Sheet 2013.pdf; Balance Sheet 2014.pdf; General Ledger.pdf; General Ledger2013.pdf; P and L 2013.pdf: Trial 
Balance.pdf; Trial Balance2014.pdf, Accounts.pdf 


Hi Jamie 
I have done the initial transfers etc. 


As the assets to come in from the US are not Au, there is not GST on supply. These are dated from 01 July 2013 and have been entered contingent of the NSW 
Supreme court action as of that date. 


I have done the initial transfer to the company for licensing as of the 30th June 2013. 
I have attached the existing accounts. | need to get these setup online so we can both access live as well as the book keeper. 
Have a look at the accounts list and tell me what you want added / changed. 


have done the initial GST and all that so we can have the year closed. The following have been processed and accepted by the ATO: 
G10 Capital purchases $ 8253633 
G11 Non-capital purchases $ 3206412 


GST is only $14 and is in credit - party huh :) 

We may have to make an adjustment - but that will be based on the ATO and the private ruling. If it is adjusted, it is still set at 2013 tax year. 

This initial amount is lodged and validated and processed by the ATO. We just need to ensure that the Court judgement is completed by August 30. 
Accounts Attached 


Regards, 
Craig 
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From: Craig S Wright 

Sent: Thursday, August 8, 2013 9:52 AM 

To: ‘Alastair James’; lan Bnghtwell' 

CC: 'jamie.wilson@hotwirepe.com' 

Subject: RE: iVote Strategy for the NSW State General Election 2015 


{awn both companies. 


Dr. Craig Wright LLM GSE GSM GSC MMiT MNSA MinfoSec CISSP/ISSMP CISM CISA 
Director, Technical Services and Research 


PanOptiCrypt 


Security + Research 
Tei: + 612 8003 7553 | Mobile: + 62 417 683 $14 


le 


From: Alastair James [mailto:alastair james@efa.nsw.gov.au] 

Sent: Thursday, 8 August 2013 6:19 PM 

To: craig@panopticrypt.com; Ian Brightwell 

Ce: jamie.wilson@hotwirepe.com 

Subject: RE: iVote Strategy for the NSW State General Election 2015 

H: Craig 

We have spotted a couple of things that need attention in the dacument, so will send a new version for you tomorrow. We also need to put some words in 
regarding scope of the services. 

Can you clarify the relationshin between PanOptiCrypt and Hotwire? 








Regards 

Alastair 

Alastair James 

NSW Electoral Commission 

Level 25, 201 Kent Street 

Sydney NSW 2006 

Direct; (02) 9290 5443 Mobile: 0408 165 953 Switch: {02} 9290 $999 


CONFIDENTIALITY NOTICE 
This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, piease delete it and notify 
the sender. Views expressed in this message are those of the individual sender and are not necessarily the views of the NSW Electoral Commission, Election 


Funding Authority or the Electorai Commissioner. 

From: Craig S Wright [mailtto:craig@panopticrypt.com] 

Sent: Thursday, 8 August 2013 16:50 

To: Ian Brightwell 

Ce: Alastair James; jamie.wilson@hotwirepe.com 

Subject: RE: iVote Strategy for the NSW State General Election 2015 

Hello, 

{will have the signed and witnessed document to you soon for those sections we have completed — attached. 
The rate is 275 inci. GST per hour. 

Regards, 

Dr. Craig Wright LLM GSE GSM GSC MMIT MNSA MinfoSec CISSP/ISSMP CISM CISA 
Director, Technical Services and Research 


PanOptiCrypt 
Security + Research 
Tel: + 612 8003 7553 | Mobile: + 61417 683 914 


http://www.pan: 
Rita 
From: Ian Brightwell [mailto:Ian.Brightwell@elections.nsw.gov.au] 

Sent: Saturday, 3 August 2013 4:30 PM 

To: Craig S Wright 

Cc: Alastair James 

Subject: FW: iVote Strategy for the NSW State General Election 2015 

Craig, 

| have attached a copy of the draft contract for your consideration. Note the clause; 

“However the Principal will grant the Recipient the ability to use knowledge gained from exposure to confidentia! information for research and other related 
academic purposes as fong as any written: or verbal statements made by the Recipient are not direct!y attridutabie to the Confidentiai Information.” 

Could you review and get back with your comments and the commercia! terms (your hourly rate) 

i would like to get this underway so we can start consulting on a range of issues related to the project. 

Ian Brightwell 

Director IT and CIO 

NSW Electoral Commission 

Level 25, 201 Kent Street 

Sydney NSW 2000 = — 

Switch: (02) 9290 5999, Direct: (02) 9290 5948, Fax: (02) 9290 5991, Mobile: 0412 252 151 


CONFIDENTIALITY NOTICE 
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This message is intended for the addressee named and may contain confidential information. If you are not the intended recipient, please delete it and notify the sender. 
Views expressed in this message are those of the individual sender and are not necessarily the views of the NSW Electoral Commission, Election Funding Authority or the 
Electoral Commissioner. 
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From: MYOB AU Customer Service 

Sent: Thursday, August 8, 2013 2:50 AM 

To: craig@panopticrypt.com 

Subject: MYOB AccountRight Live Administrator - invitation accepted 





Can't see the images in this email? Make sure your email browser is setup to view/download images 





Dear Craig §, 


Jemie Wilson has accepted your invitation to become an AccountRight Live administrator for 
the account ‘Information Defense’ under the software serial number 612052072014. 


They can new work with this file online, manage and invite other users to work with the file, 
and check out the file for exclusive use. 


For more information about AccountRight Live administrators, see 
hitp://myob.com.au/support/accountrightlive. 


Bast regards 
MYOB Australia Pty itd 
myob.com.au 





[B3) Making business life easier 





tify MYO# by reply eral ang delete Uns emai. Please nove thal you must not 
Hf or in any attectimedt to x 









ascfidentiat. if you sre aot the intended recipient, please + 
WO He, MYOE acceots no lability for viruses in this en 
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Employee 

Alex Cheung 

Allan Pedersen 
Ann Wrightson 
Balakrishnan Kannan 
Craig Wright 
Dmitry Bykovskiy 
Guangxiong Chen 
Guido Villanueva 
lan Cosgrave 
Ignatius Pang 
Jamie Wilson 
John Panelo 
Jowena Chua 
Kelly Bounassif 
Mehran Dowlatshahi 
Michelle Youssef 
Nicholas Desmond 
Pamfilo Montecillo 
Ramona Watts 
Robert Urquart 
Steven Lipke 
Trupti Birje 

Uyen Nguyen 
Zhong Bi 


Start Date 
10/21/2013 
10/21/2013 
7/15/2013 
10/1/2013 
7/1/2013 
10/1/2013 
9/2/2013 
10/1/2013 
9/23/2013 
9/1/2013 
8/1/2013 
9/2/2013 
9/9/2013 
10/21/2013 
9/2/2013 
10/1/2013 
10/17/2013 
9/2/2013 
9/1/2013 
9/2/2013 
9/9/2013 
9/2/2013 
8/1/2013 
9/2/2013 





Termination 
Date 


10/11/2013 


10/29/2013 


214 


Employee Remuneration 
As at Tuesday, 29 October 2013 
Hotwire Preemptive Intelligence Pty Ltd 


Employment Basis 

Full-time employment 
Full-time employment 
Part-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Casual employment 

Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 
Full-time employment 


Classification 
Development 
Research & Development 
Accounts 
Research & Development 
Chief Executive Officer 
Research & Development 
Research & Development 
Research & development 
Systems Engineering 
Time and Materials 
Chief Financial Officer 
Research & Development 
Research & Development 


Junior Web Designer - Graphic Artist 


Research & Development 
Research & Development 


Junior System Administrator 


Research & Development 
Chief People Officer 
Management 
Reserach & Development 
Research & Development 
Product Manager 
Research & Development 


Pay Run 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 
Monthly Pays 


Unit Rate Annual Salary 


30.72 $64,073.20 
76.8001 $160, 183.00 
30 $23,580.00 
65.8287 $137,299.80 
57.532 $120,000.00 
64.726 $135,000.00 
48.2743 = $100,686.50 
61.4401 $128,146.45 
43.8857 $91,533.00 
60 $3,125.00 
71,9178 $150,000.00 
47.9452 $100,000.00 
40.7534 $85,000.00 
24.1371 $50,343.00 
45.5479 $95,000.00 
24,1371 $50,343.00 
30.7199 $64,073.00 
40.7534 $85,000.00 
39.3151 $82,000.00 
57.5342 $120,000.00 
54.8572 $114,416.50 
35,1086 $73,226.54 
0 $24,000.00 
62.3288 $130,000.00 


$2.187,028,99 


Pay for 
October 
No 
No 
Yes 

Yes — 





Hrs Worked 


72 hrs 


176 hrs 
88 hrs 
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11/6/2019 Jamie Wilson - Founder - Cryptoloc Technology | Linkedin 


Linked [fj Join now 


Jamie Wilson 





Jamie Wilson © Cryptoloc Technology 


F 
ounder at Cryptoloc Technology Queensland University of 


Brisbane, Australia - 500+ connections Technology 


f Company Website @ 


onnect 


About 


| took a fierce interest in cybersecurity solutions after two devastating life events. In 2010 my 
father died, and our family struggled to locate his crucial documents such as a will, 
superannuation and life insurance policies. 


A year later, | witnessed a once in a 100-year flood in my home city of Brisbane with many 
businesses and residents losing vital and sensitive information. 


At the time, | had a highly successful accounting practice, specialising in clients with portfolios 
higher than $100m. However, | realised the importance of a secure central location to store critical 
documents and so shifted from accounting to cybersecurity. 


| travelled the world to learn from leading cybersecurity and cryptography experts. Back in 
Brisbane, | assembled a team of world-class developers and cybersecurity experts. 

Together, we worked to develop a highly secure platform where the authenticity and integrity of 
documents would stand up in a court of law, with no chance of tampering. 


https://au.linkedin.com/in/jamie-wilson-07424a68 
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11/6/2019 Jamie Wilson aU fraer - Cryptoloc Technology | LinkedIn 


Linked ff Join now 


Jamie Wilson 


Developing Cryptoloc Technology has been hard work. However, knowing we have become 
trusted globally for providing cybersecurity solutions which are second to none have made the 
long days and sleepless nights worthwhile. 


| regularly speak on panels and at conferences worldwide about maintaining the privacy and 
authenticity of data, educating individuals and industries about cybersecurity. 


Articles by Jamie 


Regulators must keep pace with technology 
By Jamie Wilson 


February 27, 2015 





Activity 


Do you have a product that is second to none in quality? Are others in 
your market actively committing fraud by creating ‘fake’ products and 
selling... 


Shared by Jamie Wilson 


Do you have a product that is second to none in quality? Are others in 
your market actively committing fraud by creating ‘fake’ products and 
selling... 


QUALITY: ASSUREG 


Liked by Jamie Wilson 


This is an exciting announcement!! Today we announce the expansion 
of our CrowdStrike Store partner eco-system. These new applications 
will help... 


Liked by Jamie Wilson 





https://au.linkedin.com/in/jamie-wilson-07424a68 
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11/6/2019 Jamie Wilson - Founder - Cryptoloc Technology | Linkedin 


Linked [fj Join now 


Jamie Wilson 


Experience 


Founder 
G Cryptoloc Technology 


Sep 2010 — Present 9 years 3 months 


Brisbane, Australia 


Managing Director 
Your Digital File 
Sep 2010 — Present - 9 years 3 months 


Level 12, 420 George Street, Brisbane, Queensland, Australia 


Managing Director 
JR Wilson Accounting 


2004 — 2010 - 6 years 
Brisbane, Australia 


Successful accounting practice, specialising in clients with portfolios greater than $100m. 


Laboratory Assistant, Patient Accounts 
QML Pathology 
1998 — 2004 - 6 years 


Brisbane, Australia 


Education 


Queensland University of Technology 
Bachelor of Commerce (B.Com.) - Accounting and Finance 


Groups 


https://au.linkedin.com/in/jamie-wilson-07424a68 
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11/6/2019 Jamie Wilson SU eer - Cryptoloc Technology | Linkedin 


Linked [fj Join now 


Jamie Wilson 


re pt ree er rr rn rrr ene 


Chief Marketing Officer (CMO) Network - #1 Executive Group for CMOs | 
Jobs & Career 


Recommendations 


A preview of what Linkedin members have to say about Jamie: 


4 | have known Mr Jamie Wilson, my employer, professionally for approximately 18 months. 
From my first meeting with Mr Wilson | detected in him an understanding of the importance 
of computer security issues rare in a non-IT professional. Jamie originally contracted me ona 
short-term basis to respond to some request for tenders, and to make recommendations on 
the use of an international standard of information security management (ISO 27001) to his 
company; to further improve the security posture and credibility of his organisation as a 
vendor of data security services. | was impressed that Mr Wilson was so passionate about 
computer security to the point where | realised that there would be no requirement for me to 
‘sell’ the value of security to him as a business owner — a rare situation to be sure even in our 
tech-savvy society. Jamie already possessed a unique vision for, and had hired a team to 
develop a working software solution for the protection of personal legacy data online by the 
time he brought me on-board. As an IT security professional with 20 years’ experience | do not 
believe | have come across such an innovative and worthwhile project as Mr Wilson described 
to me. By the time | learned the details of the concept behind the technology | was already 
sold on it as not only a superior offering in the market, but as something that fulfilled a unique 
community need. Over the past 18 months, | have advised Mr Wilson on matters of cyber 
security both in regard to the internal operations of Your Digital File, and in relation to current 
trends in cyber security threats and countermeasures. Jamie and | not only share a common 
understanding on the most appropriate way to deal with threats and how to advise our clients 
and partners, but Jamie relies heavily on my expertise as a sounding board whenever any 
issues are discussed or arise in our day-to-day dealings. | am essentially Mr Wilson's 24-hours- 


a-day security information feed, and through Jamie, Your Digital File represents a voice of 


https://au.linkedin.com/in/jamie-wilson-07424a68 
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11/6/2019 Jamie Wilson - Founder - Cryptoloc Technology | Linkedin 


Linked [fj Join now | Sign in | 


Jamie Wilson 


security and the application of industry best practice cyber security approaches to solving the 
problems faced by all users of information technology, specifically in the area of confidential 


data security. Yours Sincerely, Mark McPherson 


“ 


2 people have recommended Jamie 


| Join now to view | 





View Jamie Wilson’s full profile to 
See who you know in common 
Get introduced 


Contact Jamie Wilson directly 


Join to view full profile 





People also viewed 


Daniel Filmer 
Founder 


Dina Horne PB 


Making Cyber Security Easy - | help small businesses stay safe from the hackers - sme.cyberaware.com 


Jay Pandya 
Founder & CEO 


= lain F. 
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Jamie Wilson 


Tracie Thompson 
CEO and Co-founder, HackHunter 


Matt D'Astoli 


Jamie Wilson AAA er - Cryptoloc Technology | Linkedin 


Join now Sign in 


* Director* Head of Security*Cyber-Security Software Expert * Vulnerability Management Application & 


Infrastructure Security 


Adam Bennett 





Paul Watters PhD 


Stuart Peace 


Founder at Hula Strategic 


Inspired, Driven, Innovator. Infosec strategist, founder and CEO at Red Piranha 


Others named Jamie Wilson 


Jamie Wilson 


Vice President of Revenue at AskCody® 


Greater Boston Area 


Jamie Wilson 





United Kingdom 


Jamie Wilson 


Account Director at Salesforce 


Toronto, Canada Area 


Jamie Wilson 
Head Of Finance at Tails.com 


Twickenham, United Kingdom 


UK and International HVAC-R Recruiters 


>] others named Jamie Wilson are on LinkedIn 


https://au.linkedin.com/in/jamie-wilson-07424a68 
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11/6/2019 Jamie Wilson - Founder - Cryptoloc Technology | LinkedIn 


Linked [fj Join now 


Jamie Wilson 


F..) A | Communicating about Culturally Sensitive Issues 


Interpersonal Communication 





pay 


| See all courses | 


Jamie's public profile badge 


~_ Business Analysis Foundations: Business Process Modeling 


include this Linkedin profile on other websites 


{3 «Jamie Wilson 
Founder at Cryptoloc Technology 


C Founder at Cryptoloc Technology 


QUT Queensland University of Technology 


View profile badges 





View similar profiles 


Jack Brown 
Student at QUT (Queensland University of Technology) 


William Storck 
Laboratory Assistant - High Volume Chemistry at QML Pathology 
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11/6/2019 Jamie Wilson FAA ser - Cryptoloc Technology | Linkedin 


Linked [J 


Jamie Wilson 


Laboratory Assistant at QML Pathology 


Madeleine M. 


Medical Laboratory Science Student 


Cindy Nguyen 


Aspiring Forensic Scientist 


Toni Tronson 


Laboratory Assistant at QML Pathology 


© 2019 
User Agreement 
Cookie Policy 
Brand Policy 


Community Guidelines 


https://au.linkedin.com/in/jamie-wilson-07424a68 


About 

Privacy Policy 
Copyright Policy 
Guest Controls 


Language “ 


Join now Sign in 
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Patents Q & 


~ egistry 


.bstract 
US20140359291A 
A system, method, server processing system, and computer program product for operating a 
registry. In one aspect, the server processing system is configured to: receive, from a user 
processing system in data communication with the server processing system, document data 
relating to an entity; receive, from the user processing system, access data indicative of an 
accessing party to be provided access to the document data if a defined trigger event occurs; store, 
in a data store associated with the server processing system, a registry for the entity indicative of Inventor: Jamie Robert Wilson, Craig Steven Wright 
the document data and the access data; determine that a defined trigger event has occurred; and in 
response to determining that that a defined trigger event has occurred, provide the accessing party 
read-only access to the document data via an access processing system in data communication 
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1-12. (canceled) 
13. A method for operating a registry, wherein the method includes, in a server processing system: 
receiving, from a user processing system in data communication with the server processing system, document data relating to the entity; 
receiving, from the user processing system, access data indicative of an accessing party to be provided access to the document data if a defined trigger event occurs; 
storing, in a data store associated with the server processing system, a registry for the entity indicative of the document data and the access data; 
determining that a defined trigger event has occurred; and 


in response to determining that a defined trigger event has occurred, providing the accessing party read-only access to the document data via an access processing system 
in data communication with the server processing system. 


14. The method according to claim 13, wherein the registry is an estate registry, and wherein: 
the entity is an individual; 
the document data is estate data indicative of estate information relating to the siti of an individual; 
the access data is executor data indicative of an executor for the estate; and, 
a defined trigger event includes the individual dying. 
15. The method according to claim 13, wherein the registry is a corporate registry, and wherein: 
the entity is a corporate entity; 
the document data is entity data indicative of entity information relating to the entity, 


the access data is liquidator data indicative of a liquidator for the entity, and, 
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a defined trigger event includes the entity being placed into liquidation. 214 
16. The method according to any of claim 13, wherein the method includes, in the server processing system: 
receiving, from the user processing system, authorisation data indicative of a third party authorised by the entity to access at least a portion of the registry: 
receiving, from the third party via a third party processing system, an access request; 
determining, based upon the authorisation data, if the third party is authorised to read-only access at least a portion of the registry; and 
in response to identifying the third party as being authorised, providing the third party with access to at least a portion of the registry. 
17. The method according to claim 16, wherein the method includes, in the server processing system: 
receiving permission data indicative of the entity authorising the third party being able to access a portion of the registry; 
storing the permission data in the data store; and 


in response to receiving the access request and upon identifying the third party as being authorised, providing the third party with read-only access to the portion of 
the registry corresponding to the permission data for the third party. 


18. The method according to claim 16, wherein the access request includes one or more identity fields and the data store has stored therein identity data for the entity 
associated with the registry, wherein the method includes the server processing system comparing the one or more identity fields to the identity data to uniquely identify 
the registry associated with the entity. 


19. The method according to claim 13, wherein the method includes the server processing system monitoring electronic announcements to determine if a defined trigger 
event has occurred. 


20, The method according to claim 13, wherein the method includes, in the server processing system: 
receiving, from a notifying party, a notification indicative that a defined trigger event has occurred; and 
in response to the party receiving the notification, providing the accessing party read-only access to the document data. 
21. The method according to claim 13, wherein the method includes the server processing system: 
receiving, from the entity via the user processing system, an indication of an authorised notifying party; 
storing, in the data store, the indication of the authorised notifying party; 
receiving, from a notifying party, an indication that a defined trigger event has occurred; 
determining if the notifying party is the authorised notifying party; and 
in response to the notifying party corresponding to the authorised notifying party, providing the accessing party read-only access to the document data. 
22. (canceled) 
23. The method according to claim 13, wherein the method includes the server processing system encrypting the document data when stored in the registry 
24.-65. (canceled) 
66. A method of holding a document in escrow on behalf of an individual, the method including, in a processing system: 


obtaining an electronic version of the document and a digital signature of the individual, the digital signature being at least partially indicative of document content and an 
identity of the individual; 


encrypting the document so that the document can be decrypted using a decryption key; and, 


storing the encrypted document in a data store, wherein the decryption key is defined by at least three key fragments, each key fragment being associated with a respective 
entity and the key fragments being arranged so that the decryption key can be constructed from any two key fragments thereby allowing the document to be decrypted and 
released from escrow using the key fragments of any two of the entities. 


67. A method according to claim 66, wherein the key fragments are stored in a store together with an indication of an identity of the respective entity and wherein the 
method includes: 


determining the document is to be released from escrow, 
constructing the decryption key from the key fragments associated with at least two entities; and, 
using the constructed decryption key to decrypt the document. 

68.-73. (canceled) 


74. Amethod according to claim 66, wherein the digital signature is generated by encrypting information using a private key of a public/private key pair, and wherein the 
method includes: 


receiving the digital signature, the digital signature being generated by encrypting information using a private key of a public/private key pair; and, 
decrypting the digital signature using the public key to thereby validate the identity of at least one of the individual and one of the entities. 


75.-77, (canceled) 
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78. A method according to claim 66, wherein the method involves encrypting the eiMent using a symmetrical encryption algorithm, the encryption key being the same 
as the decryption key. 


79.-85. (canceled) 


86. A method according to claim 66, wherein the method includes receiving the document from an end station via a communications network, the document being 
transferred via a secure connection between the end station and the processing system. 


87.-91. (canceled) 
92. The method according to claim 13, wherein the method includes, in the server processing system: 


obtaining a digital signature of an individual, the digital signature being at least partially indicative of document content of the document data and an identity of the 
individual; 


encrypting the document data so that the document data can be decrypted using a decryption key; and, 


storing the encrypted document data in the registry, wherein the decryption key is defined by at least three key fragments, each key fragment being associated with a 
respective entity and the key fragments being arranged so that the decryption key can be constructed from any two key fragments thereby allowing the document 
data to be decrypted and accessed using the key fragments of any two of the entities. 


93. The method according to claim 13, wherein the document data is encrypted so that the document data can be decrypted using a decryption key, the decryption key 
being defined by at least three key fragments, each key fragment being associated with a respective entity and the key fragments being arranged so that the decryption 
key can be constructed from any two key fragments, and wherein the method includes, in the processing system: 


determining the document data is to be accessed; 
constructing the decryption key from the key fragments associated with at least two of the entities; and, 
using the constructed decryption key to decrypt and thereby provide access to the document data. 


94. A method according to claim 93, wherein the key fragments are stored in a store together with an indication of an identity of the respective entity, and wherein the 
method includes, in the processing system: 


determining at least two entities authorised to access the document data; 
retrieving key fragrnents associated with the at least two entities from the store; and, 
providing access to the document data using the key fragments associated with the at least two entities. 
95. A server processing system for operating a registry, wherein the server processing system is configured to: 
receive, from a user processing system in data communication with the server processing system, document data relating to an entity; 
receive, from the user processing system, access data indicative of an accessing party to be provided access to the document data if a defined trigger event occurs; 
store, in a data store associated with the server processing system, a registry for the entity indicative of the document data and the access data; 
determine that a defined trigger event has occurred; and 


in response to determining that a defined trigger event has occurred, provide the accessing party read-only access to the document data via an access processing system in 
data communication with the server processing system. 


96. The server processing system according to claim 95, wherein the server processing system is configured to: 
maintain read-only access to document data stored in the registry, 
maintain a secure timestamp of all document data stored in the registry, and, 


allow document data stored in the registry to be digitally signed. 


Description 


TECHNICAL FIELD 

{0001} The present invention relates to a registry, and particularly a registry suitable for use as an estate registry, a corporate registry or a document registry 
BACKGROUND 

[0002] The reference in this specification to any prior publication (or information derived from it), or to any matter which is known, is not, and should not be taken as an 
acknowledgment or admission or any form of suggestion that the prior publication (or information derived from it) or known matter forms part of the common 
general knowledge in the field of endeavour to which this specification relates. 

[0003] When a person dies or has a life event that precludes them from managing their own affairs (e.g. head trauma), an executor has the unfortunate task of 
gathering documentation and information to handle the affairs of the deceased. Most people store documentation in a number of disparate locations which can 
make the task of handling affairs for the deceased extremely frustrating for the executor at an emotionally difficult time. In some instances, it may not even be 
possible to locate particular information which causes further frustration. 

004] One potential solution is the use of a traditional steel safe which safely stores therein the documentation needed to handle the person's affairs in the event of 
death. However, safes also suffer drawbacks. Firstly, another person must be able to access the contents of the safe after the person dies, otherwise the 
documentation cannot be accessed. Due to this necessity, there is a serious security issue, in particular that another person has access to a central source of 
information which can be used for identity fraud. Additionally, there is a heavy burden for the contents of the safe to be current and accurate. However, the task 
of ensuring that the contents of the safe is current can be tedious. Whilst it is possible that another person can be given the task of keeping the documentation 
up to date, this again raises the same security issue above. Furthermore, it may be the wishes of the person to whom the documentation relates that a trusted 
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